./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5a75409486974cd314d9e0dd4520cbff77d7bb7a ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 17:18:06,455 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 17:18:06,456 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 17:18:06,464 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 17:18:06,464 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 17:18:06,465 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 17:18:06,465 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 17:18:06,467 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 17:18:06,468 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 17:18:06,468 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 17:18:06,469 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 17:18:06,470 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 17:18:06,470 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 17:18:06,471 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 17:18:06,471 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 17:18:06,472 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 17:18:06,473 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 17:18:06,473 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 17:18:06,475 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 17:18:06,476 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 17:18:06,477 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 17:18:06,478 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 17:18:06,478 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 17:18:06,479 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 17:18:06,481 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 17:18:06,481 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 17:18:06,481 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 17:18:06,481 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 17:18:06,481 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 17:18:06,482 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 17:18:06,482 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 17:18:06,483 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 17:18:06,483 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 17:18:06,483 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 17:18:06,484 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 17:18:06,484 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 17:18:06,484 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 17:18:06,485 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 17:18:06,485 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 17:18:06,485 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 17:18:06,486 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 17:18:06,486 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-12-07 17:18:06,497 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 17:18:06,497 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 17:18:06,498 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-12-07 17:18:06,498 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-12-07 17:18:06,498 INFO L138 SettingsManager]: * Use SBE=true [2019-12-07 17:18:06,498 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-12-07 17:18:06,499 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-12-07 17:18:06,499 INFO L138 SettingsManager]: * Use old map elimination=false [2019-12-07 17:18:06,499 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-12-07 17:18:06,499 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-12-07 17:18:06,499 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-12-07 17:18:06,499 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 17:18:06,499 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 17:18:06,499 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 17:18:06,500 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-12-07 17:18:06,501 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 17:18:06,501 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-12-07 17:18:06,501 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 17:18:06,501 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 17:18:06,501 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-12-07 17:18:06,501 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 17:18:06,501 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-12-07 17:18:06,501 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 17:18:06,502 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-12-07 17:18:06,502 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-12-07 17:18:06,502 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5a75409486974cd314d9e0dd4520cbff77d7bb7a [2019-12-07 17:18:06,601 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 17:18:06,610 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 17:18:06,613 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 17:18:06,614 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 17:18:06,614 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 17:18:06,615 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c [2019-12-07 17:18:06,657 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/data/b5b09ea28/95b47cac99eb42dcb1e19faad07ceaed/FLAG24e514874 [2019-12-07 17:18:07,081 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 17:18:07,082 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/sv-benchmarks/c/product-lines/elevator_spec14_product03.cil.c [2019-12-07 17:18:07,096 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/data/b5b09ea28/95b47cac99eb42dcb1e19faad07ceaed/FLAG24e514874 [2019-12-07 17:18:07,106 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/data/b5b09ea28/95b47cac99eb42dcb1e19faad07ceaed [2019-12-07 17:18:07,107 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 17:18:07,109 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 17:18:07,109 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 17:18:07,109 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 17:18:07,112 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 17:18:07,112 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,114 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3266040e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07, skipping insertion in model container [2019-12-07 17:18:07,114 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,119 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 17:18:07,164 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 17:18:07,477 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 17:18:07,486 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 17:18:07,561 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 17:18:07,598 INFO L208 MainTranslator]: Completed translation [2019-12-07 17:18:07,598 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07 WrapperNode [2019-12-07 17:18:07,598 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 17:18:07,599 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 17:18:07,599 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 17:18:07,599 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 17:18:07,605 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,627 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,745 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 17:18:07,745 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 17:18:07,746 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 17:18:07,746 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 17:18:07,753 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,753 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,772 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,772 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,827 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,882 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,904 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... [2019-12-07 17:18:07,930 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 17:18:07,930 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 17:18:07,930 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 17:18:07,931 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 17:18:07,931 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:07,985 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 17:18:07,985 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-12-07 17:18:07,985 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 17:18:07,985 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 17:18:13,487 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 17:18:13,487 INFO L287 CfgBuilder]: Removed 1143 assume(true) statements. [2019-12-07 17:18:13,490 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 05:18:13 BoogieIcfgContainer [2019-12-07 17:18:13,490 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 17:18:13,490 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-12-07 17:18:13,490 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-12-07 17:18:13,492 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-12-07 17:18:13,493 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 17:18:13,493 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 07.12 05:18:07" (1/3) ... [2019-12-07 17:18:13,494 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@426cd213 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 05:18:13, skipping insertion in model container [2019-12-07 17:18:13,494 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 17:18:13,494 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 05:18:07" (2/3) ... [2019-12-07 17:18:13,494 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@426cd213 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 05:18:13, skipping insertion in model container [2019-12-07 17:18:13,494 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 17:18:13,494 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 05:18:13" (3/3) ... [2019-12-07 17:18:13,495 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product03.cil.c [2019-12-07 17:18:13,523 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-12-07 17:18:13,523 INFO L357 BuchiCegarLoop]: Hoare is false [2019-12-07 17:18:13,523 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-12-07 17:18:13,524 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 17:18:13,524 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 17:18:13,524 INFO L361 BuchiCegarLoop]: Difference is false [2019-12-07 17:18:13,524 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 17:18:13,524 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-12-07 17:18:13,580 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5422 states. [2019-12-07 17:18:13,667 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1102 [2019-12-07 17:18:13,667 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:18:13,667 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:18:13,682 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:13,682 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:13,682 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-12-07 17:18:13,682 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5422 states. [2019-12-07 17:18:13,717 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1102 [2019-12-07 17:18:13,717 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:18:13,717 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:18:13,720 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:13,720 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:13,727 INFO L794 eck$LassoCheckResult]: Stem: 2788#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4078#L-1true havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2454#L1725true havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1899#L1733true main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 3841#L1323true assume 0 != main_~tmp~11; 437#L1297true havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4494#L85true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2798#L110true bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3874#L618true assume 0 == initPersonOnFloor_~floor; 4011#L619true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2820#L726-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2129#L410true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 39#L422-2true havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 776#L347true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2809#L374true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1162#L3221true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2444#L2606true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4295#L1937true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2082#L2610true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 301#L2623true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2539#L2758true assume !(0 != timeShift_~tmp___9~2); 3551#L2849true assume 1 == ~doorState~0;~doorState~0 := 0; 3554#L2849-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 754#L347-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2789#L374-3true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2376#L3221-1true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2603#L2489true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4300#L1937-1true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3241#L2502true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3081#L2857true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 896#L2546true assume !(1 == ~currentHeading~0); 3856#L2556true assume !(0 == ~currentFloorID~0); 3858#L2556-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5379#L2562-5true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4346#L347-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2614#L374-25true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2375#L3221-3true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1997#L941true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1998#L941-1true havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4348#L347-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2615#L374-26true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2380#L3221-4true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2445#L2606-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4270#L1937-4true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2083#L2610-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 282#L2623-1true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2540#L2758-1true assume !(0 != timeShift_~tmp___9~2); 3524#L2849-3true assume !(1 == ~doorState~0); 3537#L2849-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4338#L347-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2602#L374-29true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2378#L3221-5true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2604#L2489-2true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4275#L1937-5true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3226#L2502-2true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3084#L2857-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 898#L2546-3true assume !(1 == ~currentHeading~0); 4041#L2556-9true assume !(0 == ~currentFloorID~0); 4049#L2556-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5359#L2562-11true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4541#L347-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2575#L374-51true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2371#L3221-7true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1999#L941-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2000#L941-3true havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4543#L347-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2576#L374-52true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2370#L3221-8true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2449#L2606-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4245#L1937-8true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2086#L2610-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 285#L2623-2true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2536#L2758-2true assume !(0 != timeShift_~tmp___9~2); 3532#L2849-6true assume !(1 == ~doorState~0); 3503#L2849-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4519#L347-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2579#L374-55true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2373#L3221-9true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2611#L2489-4true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4250#L1937-9true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3228#L2502-4true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3083#L2857-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 893#L2546-6true assume !(1 == ~currentHeading~0); 4039#L2556-18true assume !(0 == ~currentFloorID~0); 4021#L2556-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5346#L2562-17true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4428#L347-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2669#L374-77true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2372#L3221-11true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1989#L941-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1990#L941-5true havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4446#L85-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2794#L110-1true bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3847#L618-1true assume 0 == initPersonOnFloor_~floor; 3989#L619-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2814#L726-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2106#L410-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 47#L422-5true havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4431#L347-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2672#L374-78true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2367#L3221-12true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2447#L2606-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4260#L1937-12true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2084#L2610-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 291#L2623-3true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2535#L2758-3true assume !(0 != timeShift_~tmp___9~2); 3509#L2849-9true assume !(1 == ~doorState~0); 3512#L2849-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4443#L347-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2678#L374-81true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2365#L3221-13true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2592#L2489-6true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4229#L1937-13true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3238#L2502-6true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3086#L2857-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 878#L2546-9true assume !(1 == ~currentHeading~0); 4010#L2556-27true assume !(0 == ~currentFloorID~0); 4013#L2556-29true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5329#L2562-23true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4150#L347-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2638#L374-103true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2369#L3221-15true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1991#L941-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1993#L941-7true cleanup_~i~2 := 0; 1042#L1129-2true [2019-12-07 17:18:13,728 INFO L796 eck$LassoCheckResult]: Loop: 1042#L1129-2true assume !false; 1012#L1130true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 908#L1133true assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1322#L1808true cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 885#L1137true assume 1 != cleanup_~tmp___0~3; 887#L1137-1true havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4152#L347-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2619#L374-104true anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2901#L2045true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4378#L2109true isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5368#L2122true cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3656#L1149true assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4137#L347-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2529#L374-109true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2368#L3221-16true stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2450#L2606-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4235#L1937-16true stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2076#L2610-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 288#L2623-4true timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2537#L2758-4true assume !(0 != timeShift_~tmp___9~2); 3521#L2849-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3397#L2849-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4144#L347-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2532#L374-112true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2359#L3221-17true stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2598#L2489-8true assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4239#L1937-17true stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3205#L2502-8true timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3088#L2857-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 886#L2546-12true assume !(1 == ~currentHeading~0); 3977#L2556-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3980#L2556-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5316#L2562-29true havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4074#L347-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2488#L374-134true isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2357#L3221-19true __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1995#L941-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1985#L941-9true cleanup_~i~2 := 1 + cleanup_~i~2; 1042#L1129-2true [2019-12-07 17:18:13,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:13,734 INFO L82 PathProgramCache]: Analyzing trace with hash 191841279, now seen corresponding path program 1 times [2019-12-07 17:18:13,740 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:13,740 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1887098237] [2019-12-07 17:18:13,741 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:13,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:13,980 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:13,981 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1887098237] [2019-12-07 17:18:13,981 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:13,982 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:18:13,982 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [950793412] [2019-12-07 17:18:13,986 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:18:13,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:13,986 INFO L82 PathProgramCache]: Analyzing trace with hash 987232994, now seen corresponding path program 1 times [2019-12-07 17:18:13,986 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:13,986 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184110658] [2019-12-07 17:18:13,986 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:13,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:14,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:14,042 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184110658] [2019-12-07 17:18:14,042 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:14,042 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 17:18:14,042 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [44856463] [2019-12-07 17:18:14,043 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:18:14,044 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:18:14,054 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 17:18:14,055 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-12-07 17:18:14,056 INFO L87 Difference]: Start difference. First operand 5422 states. Second operand 7 states. [2019-12-07 17:18:20,499 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:18:20,499 INFO L93 Difference]: Finished difference Result 46131 states and 87103 transitions. [2019-12-07 17:18:20,499 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2019-12-07 17:18:20,501 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46131 states and 87103 transitions. [2019-12-07 17:18:20,689 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 10061 [2019-12-07 17:18:20,908 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46131 states to 46059 states and 87019 transitions. [2019-12-07 17:18:20,909 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46059 [2019-12-07 17:18:20,951 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46059 [2019-12-07 17:18:20,951 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46059 states and 87019 transitions. [2019-12-07 17:18:21,001 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 17:18:21,002 INFO L688 BuchiCegarLoop]: Abstraction has 46059 states and 87019 transitions. [2019-12-07 17:18:21,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46059 states and 87019 transitions. [2019-12-07 17:18:21,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46059 to 15659. [2019-12-07 17:18:21,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 15659 states. [2019-12-07 17:18:21,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15659 states to 15659 states and 29560 transitions. [2019-12-07 17:18:21,365 INFO L711 BuchiCegarLoop]: Abstraction has 15659 states and 29560 transitions. [2019-12-07 17:18:21,365 INFO L591 BuchiCegarLoop]: Abstraction has 15659 states and 29560 transitions. [2019-12-07 17:18:21,365 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-12-07 17:18:21,365 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15659 states and 29560 transitions. [2019-12-07 17:18:21,399 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3207 [2019-12-07 17:18:21,399 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:18:21,399 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:18:21,403 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:21,403 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:21,403 INFO L794 eck$LassoCheckResult]: Stem: 55128#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 55129#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 54615#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 54148#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 54149#L1323 assume 0 != main_~tmp~11; 52394#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 52395#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 55138#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 55139#L618 assume 0 == initPersonOnFloor_~floor; 56258#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 51902#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 54398#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 51694#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 51695#L347 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 52888#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57460#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57459#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57457#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57453#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 57454#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 62513#L2758 assume !(0 != timeShift_~tmp___9~2); 62514#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 66761#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 66760#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 66759#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 66758#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 66756#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 66757#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 66765#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 66763#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 66762#L2546 assume !(1 == ~currentHeading~0); 56240#L2556 assume !(0 == ~currentFloorID~0); 56241#L2556-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51644#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56677#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56678#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 61812#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 61808#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 57674#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 57672#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57301#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57663#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57324#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57321#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57320#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54330#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 63373#L2758-1 assume !(0 != timeShift_~tmp___9~2); 63374#L2849-3 assume !(1 == ~doorState~0); 66865#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 66864#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 66863#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 66862#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 54862#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 54863#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 66861#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 66859#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 66860#L2546-3 assume !(1 == ~currentHeading~0); 56497#L2556-9 assume !(0 == ~currentFloorID~0); 56498#L2556-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51618#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56721#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54819#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54578#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 54246#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 51929#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 54248#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56722#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57619#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57331#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57325#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57322#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54334#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 63843#L2758-2 assume !(0 != timeShift_~tmp___9~2); 63844#L2849-6 assume !(1 == ~doorState~0); 67006#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 67005#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 67004#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 67003#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 67001#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 56632#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 55542#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 55406#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 55407#L2546-6 assume !(1 == ~currentHeading~0); 56494#L2556-18 assume !(0 == ~currentFloorID~0); 56467#L2556-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51625#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 61457#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57370#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 61454#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 61449#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 61446#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 61443#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 61437#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 61436#L618-1 assume 0 == initPersonOnFloor_~floor; 61403#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 61365#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 61360#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 57638#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 57631#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 57372#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 57607#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 57540#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 57474#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 57464#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54332#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 65915#L2758-3 assume !(0 != timeShift_~tmp___9~2); 65916#L2849-9 assume !(1 == ~doorState~0); 67184#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 67183#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 67182#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 67181#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 67179#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 56615#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 56616#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 67171#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 67172#L2546-9 assume !(1 == ~currentHeading~0); 56451#L2556-27 assume !(0 == ~currentFloorID~0); 56452#L2556-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51603#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56573#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54917#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54575#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 54236#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 51891#L941-7 cleanup_~i~2 := 0; 53115#L1129-2 [2019-12-07 17:18:21,404 INFO L796 eck$LassoCheckResult]: Loop: 53115#L1129-2 assume !false; 53114#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 53051#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 53052#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 53008#L1137 assume 1 != cleanup_~tmp___0~3; 53009#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 53013#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54884#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 54885#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 52033#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 56688#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 55890#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 55891#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54748#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54749#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 59876#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 56620#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 56621#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 54323#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 65583#L2758-4 assume !(0 != timeShift_~tmp___9~2); 65584#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 66921#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 66920#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 66919#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 66918#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 66916#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 66917#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 66963#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 66962#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 66941#L2546-12 assume !(1 == ~currentHeading~0); 56398#L2556-36 assume !(0 == ~currentFloorID~0); 56399#L2556-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51974#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 56524#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 54676#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 54562#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 54240#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 51907#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 53115#L1129-2 [2019-12-07 17:18:21,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:21,405 INFO L82 PathProgramCache]: Analyzing trace with hash 191841279, now seen corresponding path program 2 times [2019-12-07 17:18:21,405 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:21,405 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1497420943] [2019-12-07 17:18:21,405 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:21,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:21,499 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:21,499 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1497420943] [2019-12-07 17:18:21,499 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:21,499 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:18:21,500 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1018335163] [2019-12-07 17:18:21,500 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:18:21,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:21,500 INFO L82 PathProgramCache]: Analyzing trace with hash 177886368, now seen corresponding path program 1 times [2019-12-07 17:18:21,500 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:21,500 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [180894422] [2019-12-07 17:18:21,501 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:21,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:21,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:21,518 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [180894422] [2019-12-07 17:18:21,518 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:21,518 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:18:21,519 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1673980937] [2019-12-07 17:18:21,519 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:18:21,519 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:18:21,519 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 17:18:21,520 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 17:18:21,520 INFO L87 Difference]: Start difference. First operand 15659 states and 29560 transitions. cyclomatic complexity: 13903 Second operand 3 states. [2019-12-07 17:18:21,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:18:21,900 INFO L93 Difference]: Finished difference Result 28116 states and 53034 transitions. [2019-12-07 17:18:21,900 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 17:18:21,901 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28116 states and 53034 transitions. [2019-12-07 17:18:21,986 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6386 [2019-12-07 17:18:22,095 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28116 states to 28116 states and 53034 transitions. [2019-12-07 17:18:22,095 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28116 [2019-12-07 17:18:22,110 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28116 [2019-12-07 17:18:22,110 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28116 states and 53034 transitions. [2019-12-07 17:18:22,127 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 17:18:22,127 INFO L688 BuchiCegarLoop]: Abstraction has 28116 states and 53034 transitions. [2019-12-07 17:18:22,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28116 states and 53034 transitions. [2019-12-07 17:18:22,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28116 to 28084. [2019-12-07 17:18:22,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28084 states. [2019-12-07 17:18:22,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28084 states to 28084 states and 52986 transitions. [2019-12-07 17:18:22,370 INFO L711 BuchiCegarLoop]: Abstraction has 28084 states and 52986 transitions. [2019-12-07 17:18:22,370 INFO L591 BuchiCegarLoop]: Abstraction has 28084 states and 52986 transitions. [2019-12-07 17:18:22,370 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-12-07 17:18:22,370 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28084 states and 52986 transitions. [2019-12-07 17:18:22,422 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6378 [2019-12-07 17:18:22,423 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:18:22,423 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:18:22,426 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:22,426 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:22,426 INFO L794 eck$LassoCheckResult]: Stem: 98891#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 98892#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 98394#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 97941#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 97942#L1323 assume 0 != main_~tmp~11; 96165#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 96166#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 98902#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 98903#L618 assume 0 == initPersonOnFloor_~floor; 100033#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 95683#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 98191#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 95476#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 95477#L347 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 96657#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 97039#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 97040#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98385#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 98124#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95952#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95953#L2758 assume !(0 != timeShift_~tmp___9~2); 98547#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 99557#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 96621#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 96622#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98373#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98374#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 100425#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99325#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99326#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96796#L2546 assume !(1 == ~currentHeading~0); 96797#L2556 assume !(0 == ~currentFloorID~0); 100016#L2556-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 99996#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 123462#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 104076#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 123461#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 123456#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 123454#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 123453#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 104061#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 102241#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 101543#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 101542#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 101540#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 101541#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 108130#L2758-1 assume !(0 != timeShift_~tmp___9~2); 108129#L2849-3 assume !(1 == ~doorState~0); 108128#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 108127#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 108126#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 108124#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 108121#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 108084#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 108078#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 108075#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 108074#L2546-3 assume !(1 == ~currentHeading~0); 102254#L2556-9 assume !(0 == ~currentFloorID~0); 100448#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 107341#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 107758#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101546#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 107757#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 107752#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 107750#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 107749#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 101074#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 107746#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 107739#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 107737#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 102314#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95927#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95928#L2758-2 assume !(0 != timeShift_~tmp___9~2); 98540#L2849-6 assume !(1 == ~doorState~0); 99525#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 99526#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98605#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98368#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98369#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98648#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99312#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99173#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96790#L2546-6 assume !(1 == ~currentHeading~0); 96791#L2556-18 assume !(0 == ~currentFloorID~0); 100242#L2556-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 95407#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 100486#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98751#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98367#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 98028#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 95663#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 98030#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 98897#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 98898#L618-1 assume 0 == initPersonOnFloor_~floor; 100007#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 95651#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 98920#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 113488#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 113487#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 102319#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 113485#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 113314#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 113313#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 113312#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95939#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95940#L2758-3 assume !(0 != timeShift_~tmp___9~2); 98539#L2849-9 assume !(1 == ~doorState~0); 99531#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 99533#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98768#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98355#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98356#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98623#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99322#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99177#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96771#L2546-9 assume !(1 == ~currentHeading~0); 96772#L2556-27 assume !(0 == ~currentFloorID~0); 100227#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100160#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 117476#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 102337#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 117475#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 117470#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 117468#L941-7 cleanup_~i~2 := 0; 117466#L1129-2 [2019-12-07 17:18:22,427 INFO L796 eck$LassoCheckResult]: Loop: 117466#L1129-2 assume !false; 117465#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 117464#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 117463#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 117462#L1137 assume 1 != cleanup_~tmp___0~3; 117461#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 117460#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 117459#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 117435#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 117429#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 117428#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 117427#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 117426#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 113792#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 117425#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 117424#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 117423#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 117422#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 95933#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 95934#L2758-4 assume !(0 != timeShift_~tmp___9~2); 98542#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 99449#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 99450#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 98534#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 98351#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 98352#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 98631#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 99293#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 99180#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 96779#L2546-12 assume !(1 == ~currentHeading~0); 96780#L2556-36 assume !(0 == ~currentFloorID~0); 100177#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 100116#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 119464#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 113857#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 119463#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 117498#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 117467#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 117466#L1129-2 [2019-12-07 17:18:22,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:22,427 INFO L82 PathProgramCache]: Analyzing trace with hash 1234881215, now seen corresponding path program 1 times [2019-12-07 17:18:22,427 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:22,427 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510895826] [2019-12-07 17:18:22,427 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:22,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:22,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:22,473 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510895826] [2019-12-07 17:18:22,473 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:22,473 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:18:22,474 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [628456849] [2019-12-07 17:18:22,474 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:18:22,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:22,474 INFO L82 PathProgramCache]: Analyzing trace with hash 1952893730, now seen corresponding path program 1 times [2019-12-07 17:18:22,474 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:22,474 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1395773449] [2019-12-07 17:18:22,474 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:22,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:22,518 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:22,518 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1395773449] [2019-12-07 17:18:22,518 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:22,518 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 17:18:22,518 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766828540] [2019-12-07 17:18:22,519 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:18:22,519 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:18:22,519 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 17:18:22,519 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-12-07 17:18:22,519 INFO L87 Difference]: Start difference. First operand 28084 states and 52986 transitions. cyclomatic complexity: 24904 Second operand 8 states. [2019-12-07 17:18:31,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:18:31,087 INFO L93 Difference]: Finished difference Result 271091 states and 514268 transitions. [2019-12-07 17:18:31,088 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2019-12-07 17:18:31,088 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 271091 states and 514268 transitions. [2019-12-07 17:18:31,968 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 78012 [2019-12-07 17:18:33,007 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 271091 states to 271091 states and 514268 transitions. [2019-12-07 17:18:33,007 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 271091 [2019-12-07 17:18:33,131 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 271091 [2019-12-07 17:18:33,131 INFO L73 IsDeterministic]: Start isDeterministic. Operand 271091 states and 514268 transitions. [2019-12-07 17:18:33,235 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 17:18:33,235 INFO L688 BuchiCegarLoop]: Abstraction has 271091 states and 514268 transitions. [2019-12-07 17:18:33,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271091 states and 514268 transitions. [2019-12-07 17:18:34,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271091 to 55990. [2019-12-07 17:18:34,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55990 states. [2019-12-07 17:18:34,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55990 states to 55990 states and 105611 transitions. [2019-12-07 17:18:34,364 INFO L711 BuchiCegarLoop]: Abstraction has 55990 states and 105611 transitions. [2019-12-07 17:18:34,364 INFO L591 BuchiCegarLoop]: Abstraction has 55990 states and 105611 transitions. [2019-12-07 17:18:34,364 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-12-07 17:18:34,364 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55990 states and 105611 transitions. [2019-12-07 17:18:34,478 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 12632 [2019-12-07 17:18:34,479 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:18:34,479 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:18:34,482 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:34,482 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:34,482 INFO L794 eck$LassoCheckResult]: Stem: 398381#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 398382#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 397811#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 397295#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 397296#L1323 assume 0 != main_~tmp~11; 395426#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 395427#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 398394#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 398395#L618 assume 0 == initPersonOnFloor_~floor; 399624#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 394932#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 397565#L410 assume !(0 == callOnFloor_~floorID); 397380#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 394721#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 394722#L347 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398407#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 398408#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 397798#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 397799#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 397491#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 397493#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 403779#L2758 assume !(0 != timeShift_~tmp___9~2); 403780#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 403856#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 403857#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 403854#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 403855#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 403851#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 403852#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 404692#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398677#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396083#L2546 assume !(1 == ~currentHeading~0); 396084#L2556 assume !(0 == ~currentFloorID~0); 399607#L2556-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399585#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 404627#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 400846#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 404622#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 404619#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 394951#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 406651#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 406649#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 406644#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 406645#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 406639#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 406640#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 416541#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 416534#L2758-1 assume !(0 != timeShift_~tmp___9~2); 416535#L2849-3 assume !(1 == ~doorState~0); 418366#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 418365#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 418364#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 418363#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 418361#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 418359#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 418357#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 418354#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 418355#L2546-3 assume !(1 == ~currentHeading~0); 415275#L2556-9 assume !(0 == ~currentFloorID~0); 400100#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 415480#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 400224#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 400225#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 397765#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 397766#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 397404#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 397405#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398046#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 398047#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 397805#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 397807#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 403918#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 395181#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 395182#L2758-2 assume !(0 != timeShift_~tmp___9~2); 397972#L2849-6 assume !(1 == ~doorState~0); 399085#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 399086#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398052#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 397769#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 397770#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 400036#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 398837#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398679#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396077#L2546-6 assume !(1 == ~currentHeading~0); 396078#L2556-18 assume !(0 == ~currentFloorID~0); 399843#L2556-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399819#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 406856#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 406848#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 406849#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 406842#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 406840#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 400181#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 398389#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 398390#L618-1 assume 0 == initPersonOnFloor_~floor; 399597#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 394900#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 398414#L410-2 assume !(0 == callOnFloor_~floorID); 406792#L413-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 432311#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 432310#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 422959#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 432309#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 432307#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 432308#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 432305#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 432306#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 432338#L2758-3 assume !(0 != timeShift_~tmp___9~2); 432337#L2849-9 assume !(1 == ~doorState~0); 432336#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 432335#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 432334#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 432333#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 432332#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 400014#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 398849#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398684#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396054#L2546-9 assume !(1 == ~currentHeading~0); 396055#L2556-27 assume !(0 == ~currentFloorID~0); 399826#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399759#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 400796#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 398153#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 398154#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 422535#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 422534#L941-7 cleanup_~i~2 := 0; 438773#L1129-2 [2019-12-07 17:18:34,483 INFO L796 eck$LassoCheckResult]: Loop: 438773#L1129-2 assume !false; 438774#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 438741#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 438742#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 422513#L1137 assume 1 != cleanup_~tmp___0~3; 422514#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 422503#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 422504#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 422500#L2045 assume !(0 != anyStopRequested_~tmp___3~0); 398066#L2049 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 395063#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 438001#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 438002#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 440560#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 436905#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 440547#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 440548#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 440536#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 431925#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 431926#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 448734#L2758-4 assume !(0 != timeShift_~tmp___9~2); 449591#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 450181#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 449953#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 449954#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 449939#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 449940#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 400025#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 398816#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 398687#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 396063#L2546-12 assume !(1 == ~currentHeading~0); 396064#L2556-36 assume !(0 == ~currentFloorID~0); 399775#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 399716#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 438812#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 422602#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 438808#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 438798#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 438797#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 438773#L1129-2 [2019-12-07 17:18:34,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:34,483 INFO L82 PathProgramCache]: Analyzing trace with hash -757646360, now seen corresponding path program 1 times [2019-12-07 17:18:34,483 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:34,484 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1194496395] [2019-12-07 17:18:34,484 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:34,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:34,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:34,531 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1194496395] [2019-12-07 17:18:34,531 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:34,531 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:18:34,532 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133282896] [2019-12-07 17:18:34,532 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:18:34,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:34,532 INFO L82 PathProgramCache]: Analyzing trace with hash 1739424412, now seen corresponding path program 1 times [2019-12-07 17:18:34,533 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:34,533 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627523234] [2019-12-07 17:18:34,533 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:34,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:34,571 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:34,572 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627523234] [2019-12-07 17:18:34,572 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:34,572 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 17:18:34,572 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [220325863] [2019-12-07 17:18:34,572 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:18:34,572 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:18:34,572 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 17:18:34,572 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-12-07 17:18:34,573 INFO L87 Difference]: Start difference. First operand 55990 states and 105611 transitions. cyclomatic complexity: 49623 Second operand 8 states. [2019-12-07 17:18:49,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:18:49,824 INFO L93 Difference]: Finished difference Result 325618 states and 613807 transitions. [2019-12-07 17:18:49,824 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2019-12-07 17:18:49,824 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 325618 states and 613807 transitions. [2019-12-07 17:18:51,066 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 90182 [2019-12-07 17:18:51,878 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 325618 states to 325618 states and 613807 transitions. [2019-12-07 17:18:51,878 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 325618 [2019-12-07 17:18:52,063 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 325618 [2019-12-07 17:18:52,064 INFO L73 IsDeterministic]: Start isDeterministic. Operand 325618 states and 613807 transitions. [2019-12-07 17:18:52,210 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 17:18:52,210 INFO L688 BuchiCegarLoop]: Abstraction has 325618 states and 613807 transitions. [2019-12-07 17:18:52,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325618 states and 613807 transitions. [2019-12-07 17:18:53,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325618 to 55545. [2019-12-07 17:18:53,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55545 states. [2019-12-07 17:18:53,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55545 states to 55545 states and 104740 transitions. [2019-12-07 17:18:53,590 INFO L711 BuchiCegarLoop]: Abstraction has 55545 states and 104740 transitions. [2019-12-07 17:18:53,590 INFO L591 BuchiCegarLoop]: Abstraction has 55545 states and 104740 transitions. [2019-12-07 17:18:53,590 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-12-07 17:18:53,590 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55545 states and 104740 transitions. [2019-12-07 17:18:53,704 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 12590 [2019-12-07 17:18:53,704 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:18:53,704 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:18:53,706 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:53,706 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:18:53,707 INFO L794 eck$LassoCheckResult]: Stem: 779974#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 779975#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 779420#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 778937#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 778938#L1323 assume 0 != main_~tmp~11; 777133#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 777134#L85 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 779986#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 779987#L618 assume 0 == initPersonOnFloor_~floor; 781208#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 776642#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 779207#L410 assume !(0 == callOnFloor_~floorID); 779017#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 776478#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 777633#L347 assume !(0 == isFloorCalling_~floorID); 777635#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781337#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 782352#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 782353#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 781647#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 781648#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 786341#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 786339#L2758 assume !(0 != timeShift_~tmp___9~2); 786338#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 786268#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 783210#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 777596#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784367#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 784365#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784366#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 801175#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 801165#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 801158#L2546 assume !(1 == ~currentHeading~0); 801150#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 801142#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 799276#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781683#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781684#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 799274#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 799270#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 799264#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781686#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781687#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 800361#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 800360#L2606-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 800359#L347-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 800353#L374-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 800350#L2579-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 800349#L2591-3 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 800348#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 800342#L2758-1 assume !(0 != timeShift_~tmp___9~2); 780705#L2849-3 assume !(1 == ~doorState~0); 780706#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 780717#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 799241#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 799240#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 799238#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 799239#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 798956#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 798949#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 798933#L2546-3 assume !(1 == ~currentHeading~0); 798918#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 798908#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 789877#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 789878#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 789873#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 789874#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 789863#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 789862#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781775#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 781776#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 797596#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 797595#L2606-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 797593#L347-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 797588#L374-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 797585#L2579-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 797584#L2591-5 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 797583#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 797581#L2758-2 assume !(0 != timeShift_~tmp___9~2); 797580#L2849-6 assume !(1 == ~doorState~0); 797578#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 797577#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 797575#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 797574#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 797572#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 797570#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 797562#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 797452#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 797373#L2546-6 assume !(1 == ~currentHeading~0); 797366#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 797358#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 782336#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 781736#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 779814#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 779389#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 779024#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 776617#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 779026#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 779981#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 779982#L618-1 assume 0 == initPersonOnFloor_~floor; 781179#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 776605#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 794380#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 783236#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 783237#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 783226#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 783227#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 783221#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 783223#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 783218#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 779133#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 787991#L2758-3 assume !(0 != timeShift_~tmp___9~2); 787992#L2849-9 assume !(1 == ~doorState~0); 796998#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 796997#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 796996#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 796995#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 796993#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 796991#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 790825#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 790800#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 790789#L2546-9 assume !(1 == ~currentHeading~0); 790790#L2556-27 assume !(0 == ~currentFloorID~0); 790760#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 784259#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 784260#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784251#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784252#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 784247#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784248#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 784243#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 784244#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 784236#L941-7 cleanup_~i~2 := 0; 784235#L1129-2 [2019-12-07 17:18:53,707 INFO L796 eck$LassoCheckResult]: Loop: 784235#L1129-2 assume !false; 784226#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 784227#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 784218#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 784219#L1137 assume 1 != cleanup_~tmp___0~3; 784146#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 784147#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784142#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 784143#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 784138#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 784139#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 784123#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 784124#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784117#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784118#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 784112#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784114#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 784108#L2610-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 779124#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 790661#L2758-4 assume !(0 != timeShift_~tmp___9~2); 790662#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 821776#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 821775#L347-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 821774#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 821773#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 821771#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 821770#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 821769#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 821698#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 816594#L2546-12 assume !(1 == ~currentHeading~0); 816593#L2556-36 assume !(0 == ~currentFloorID~0); 815969#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 814631#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 814632#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 784278#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 784279#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 784274#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 784275#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 784268#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 784269#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 784234#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 784235#L1129-2 [2019-12-07 17:18:53,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:53,707 INFO L82 PathProgramCache]: Analyzing trace with hash 209417879, now seen corresponding path program 1 times [2019-12-07 17:18:53,708 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:53,708 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509607513] [2019-12-07 17:18:53,708 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:53,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:18:53,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:18:53,753 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509607513] [2019-12-07 17:18:53,753 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:18:53,753 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:18:53,754 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1024975178] [2019-12-07 17:18:53,754 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:18:53,754 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:18:53,754 INFO L82 PathProgramCache]: Analyzing trace with hash -964967420, now seen corresponding path program 1 times [2019-12-07 17:18:53,754 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:18:53,754 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [627953891] [2019-12-07 17:18:53,754 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:18:53,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 17:18:53,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 17:18:53,799 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-12-07 17:18:54,330 WARN L192 SmtUtils]: Spent 526.00 ms on a formula simplification. DAG size of input: 192 DAG size of output: 173 [2019-12-07 17:18:55,037 WARN L192 SmtUtils]: Spent 640.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 122 [2019-12-07 17:18:55,044 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 17:18:55,045 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 17:18:55,045 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 17:18:55,045 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 17:18:55,045 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-12-07 17:18:55,045 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,045 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 17:18:55,045 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 17:18:55,045 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration5_Loop [2019-12-07 17:18:55,045 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 17:18:55,045 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 17:18:55,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,121 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,128 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,134 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,139 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,141 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,142 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,150 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,151 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,168 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,177 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,225 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,226 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,233 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:18:55,652 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 17:18:55,653 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,657 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,657 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,663 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,663 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,668 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,668 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,671 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,671 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,676 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,676 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,679 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,679 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret6=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,684 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,684 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,687 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,687 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,692 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,692 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,697 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,697 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,706 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,706 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,711 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,711 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~tmp~16=1, ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~19=1} Honda state: {ULTIMATE.start_isIdle_~tmp~16=1, ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~19=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,828 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,828 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,831 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,831 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret107=0} Honda state: {ULTIMATE.start_timeShift_#t~ret107=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,842 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,842 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:18:55,846 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 17:18:55,846 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret100=0} Honda state: {ULTIMATE.start_timeShift_#t~ret100=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,856 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:18:55,856 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:18:55,867 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-12-07 17:18:55,867 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:19:02,685 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-12-07 17:19:02,690 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 17:19:02,690 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 17:19:02,690 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 17:19:02,690 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 17:19:02,690 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-12-07 17:19:02,690 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:02,690 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 17:19:02,690 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 17:19:02,690 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration5_Loop [2019-12-07 17:19:02,690 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 17:19:02,690 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 17:19:02,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,698 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,712 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,718 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,775 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,805 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,810 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,824 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:02,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:19:03,215 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 17:19:03,220 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,224 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,225 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,225 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,226 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,226 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,226 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,227 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,227 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,229 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,234 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,235 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,235 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,235 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,235 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,235 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,236 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,236 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,237 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,240 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,241 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,241 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,242 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,242 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,242 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,242 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,242 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,244 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,248 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,250 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,250 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,250 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,250 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,250 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,250 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,251 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,252 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,259 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,260 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,260 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,260 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,260 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,260 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,261 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,261 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,262 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,266 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,267 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,267 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,267 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,267 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,267 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,267 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,267 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,268 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,273 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,274 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,274 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,274 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,274 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,274 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,274 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,274 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,275 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,279 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,280 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,280 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,280 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,280 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,280 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,281 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,281 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,282 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,286 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,287 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,287 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,287 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,287 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,287 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,287 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,287 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,288 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,292 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,293 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,294 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,294 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,294 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,294 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,294 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,295 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,296 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,300 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,301 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,301 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,301 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,302 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,302 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,302 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,302 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,303 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,307 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,308 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,308 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,308 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,308 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,309 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,309 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,309 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,310 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,314 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,316 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,316 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,316 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,316 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,316 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,316 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,316 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,318 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,321 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,322 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,322 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,322 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,322 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,322 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,323 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,323 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,324 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,327 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,328 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,328 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,329 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,329 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,329 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,329 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,329 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,330 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,334 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,335 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,335 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,335 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,335 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,335 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,336 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,336 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,337 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,340 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,342 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,342 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,342 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,342 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,342 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,343 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,343 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,345 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,348 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:19:03,350 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:19:03,350 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:19:03,350 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:19:03,350 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:19:03,350 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:19:03,353 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:19:03,353 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:19:03,357 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-12-07 17:19:03,363 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2019-12-07 17:19:03,363 INFO L444 ModelExtractionUtils]: 9 out of 12 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:19:03,368 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-12-07 17:19:03,368 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-12-07 17:19:03,369 INFO L510 LassoAnalysis]: Proved termination. [2019-12-07 17:19:03,369 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2019-12-07 17:19:03,372 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-12-07 17:19:03,396 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:03,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:03,530 INFO L264 TraceCheckSpWp]: Trace formula consists of 1035 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 17:19:03,535 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 17:19:03,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:03,573 INFO L264 TraceCheckSpWp]: Trace formula consists of 169 conjuncts, 18 conjunts are in the unsatisfiable core [2019-12-07 17:19:03,574 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 17:19:03,622 INFO L319 QuantifierPusher]: Applying distributivity, recursing on 2 terms [2019-12-07 17:19:03,657 INFO L319 QuantifierPusher]: Applying distributivity, recursing on 2 terms [2019-12-07 17:19:03,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:03,674 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2019-12-07 17:19:03,674 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 55545 states and 104740 transitions. cyclomatic complexity: 49201 Second operand 10 states. [2019-12-07 17:19:09,232 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 55545 states and 104740 transitions. cyclomatic complexity: 49201. Second operand 10 states. Result 187075 states and 351852 transitions. Complement of second has 27 states. [2019-12-07 17:19:09,232 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 14 states 1 stem states 12 non-accepting loop states 1 accepting loop states [2019-12-07 17:19:09,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2019-12-07 17:19:09,251 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 27891 transitions. [2019-12-07 17:19:09,253 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 27891 transitions. Stem has 133 letters. Loop has 41 letters. [2019-12-07 17:19:09,256 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 17:19:09,256 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 27891 transitions. Stem has 174 letters. Loop has 41 letters. [2019-12-07 17:19:09,258 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 17:19:09,258 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 27891 transitions. Stem has 133 letters. Loop has 82 letters. [2019-12-07 17:19:09,260 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 17:19:09,260 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 187075 states and 351852 transitions. [2019-12-07 17:19:09,870 INFO L131 ngComponentsAnalysis]: Automaton has 24 accepting balls. 66949 [2019-12-07 17:19:10,580 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 187075 states to 187075 states and 351852 transitions. [2019-12-07 17:19:10,580 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 121034 [2019-12-07 17:19:10,673 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 121378 [2019-12-07 17:19:10,673 INFO L73 IsDeterministic]: Start isDeterministic. Operand 187075 states and 351852 transitions. [2019-12-07 17:19:10,694 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:10,694 INFO L688 BuchiCegarLoop]: Abstraction has 187075 states and 351852 transitions. [2019-12-07 17:19:10,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187075 states and 351852 transitions. [2019-12-07 17:19:11,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187075 to 102084. [2019-12-07 17:19:11,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 102084 states. [2019-12-07 17:19:12,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102084 states to 102084 states and 192350 transitions. [2019-12-07 17:19:12,160 INFO L711 BuchiCegarLoop]: Abstraction has 102084 states and 192350 transitions. [2019-12-07 17:19:12,160 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:12,160 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 17:19:12,160 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 17:19:12,160 INFO L87 Difference]: Start difference. First operand 102084 states and 192350 transitions. Second operand 3 states. [2019-12-07 17:19:12,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:19:12,680 INFO L93 Difference]: Finished difference Result 173935 states and 327634 transitions. [2019-12-07 17:19:12,681 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 17:19:12,681 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 173935 states and 327634 transitions. [2019-12-07 17:19:13,337 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 64504 [2019-12-07 17:19:14,047 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 173935 states to 173935 states and 327634 transitions. [2019-12-07 17:19:14,047 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 126325 [2019-12-07 17:19:14,105 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 126325 [2019-12-07 17:19:14,105 INFO L73 IsDeterministic]: Start isDeterministic. Operand 173935 states and 327634 transitions. [2019-12-07 17:19:14,128 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:14,128 INFO L688 BuchiCegarLoop]: Abstraction has 173935 states and 327634 transitions. [2019-12-07 17:19:14,208 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173935 states and 327634 transitions. [2019-12-07 17:19:15,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173935 to 102084. [2019-12-07 17:19:15,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 102084 states. [2019-12-07 17:19:15,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102084 states to 102084 states and 192344 transitions. [2019-12-07 17:19:15,236 INFO L711 BuchiCegarLoop]: Abstraction has 102084 states and 192344 transitions. [2019-12-07 17:19:15,237 INFO L591 BuchiCegarLoop]: Abstraction has 102084 states and 192344 transitions. [2019-12-07 17:19:15,237 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-12-07 17:19:15,237 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 102084 states and 192344 transitions. [2019-12-07 17:19:15,460 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32252 [2019-12-07 17:19:15,460 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:19:15,460 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:19:15,462 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:15,462 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:15,463 INFO L794 eck$LassoCheckResult]: Stem: 1300065#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1300066#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 1299373#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1298751#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 1298752#L1323 assume 0 != main_~tmp~11; 1296482#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1296483#L85 assume !(0 == getOrigin_~person); 1301532#L89 assume !(1 == getOrigin_~person); 1301341#L93 assume !(2 == getOrigin_~person); 1301342#L97 assume !(3 == getOrigin_~person); 1302632#L101 assume !(4 == getOrigin_~person); 1300166#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1300076#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1300077#L618 assume 0 == initPersonOnFloor_~floor; 1301492#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1295932#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1299085#L410 assume !(0 == callOnFloor_~floorID); 1298845#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1295679#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1295680#L347 assume !(0 == isFloorCalling_~floorID); 1297115#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1303638#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1303641#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1303632#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1303633#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1303615#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1303613#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1303611#L2758 assume !(0 != timeShift_~tmp___9~2); 1303610#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 1303609#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1303608#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1297074#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299341#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1299342#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1299722#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1305507#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1305505#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1305506#L2546 assume !(1 == ~currentHeading~0); 1305503#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1302118#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1295614#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1302116#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299739#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299340#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1298866#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1295953#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1298868#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299740#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299349#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1299350#L2606-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1314764#L347-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1314757#L374-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1314753#L2579-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1314751#L2591-3 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1314749#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1314746#L2758-1 assume !(0 != timeShift_~tmp___9~2); 1300912#L2849-3 assume !(1 == ~doorState~0); 1300913#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1314731#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1308594#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1314727#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1314616#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1314597#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1314592#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1314276#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1313829#L2546-3 assume !(1 == ~currentHeading~0); 1297299#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1302105#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1301818#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1316540#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1310262#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1316536#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1316537#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1316511#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1316512#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1303116#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1316508#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1299369#L2606-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1299370#L347-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299678#L374-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1299679#L2579-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1299796#L2591-5 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1296217#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1296218#L2758-2 assume !(0 != timeShift_~tmp___9~2); 1299589#L2849-6 assume !(1 == ~doorState~0); 1300893#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1300894#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1299680#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1299336#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1299337#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1299734#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1317065#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1316123#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1316125#L2546-6 assume !(1 == ~currentHeading~0); 1325199#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1320282#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1320281#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1327934#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1303044#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1327932#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1327928#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1327926#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1327925#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 1327919#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1326469#L618-1 assume 0 == initPersonOnFloor_~floor; 1325082#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1325047#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1325031#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1325019#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1325020#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1323582#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1323583#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1323570#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1323555#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1323556#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1323550#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1323551#L2758-3 assume !(0 != timeShift_~tmp___9~2); 1323546#L2849-9 assume !(1 == ~doorState~0); 1323537#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1323534#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1321011#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1321010#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1321009#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1320945#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1320946#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1320940#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1320942#L2546-9 assume !(1 == ~currentHeading~0); 1301768#L2556-27 assume !(0 == ~currentFloorID~0); 1301769#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1334188#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1350533#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1340454#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1350532#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1350531#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1350530#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1350529#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1350527#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1350525#L941-7 cleanup_~i~2 := 0; 1350522#L1129-2 assume !false; 1350523#L1130 [2019-12-07 17:19:15,463 INFO L796 eck$LassoCheckResult]: Loop: 1350523#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1381827#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1381825#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 1381823#L1137 assume 1 != cleanup_~tmp___0~3; 1381821#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1381819#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1381817#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 1381300#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1380907#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1380906#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 1380905#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1380904#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1368360#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1380902#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1380901#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1380845#L347-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1380840#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1380799#L2579-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1380798#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1380796#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1380794#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1380795#L2760-8 assume !(0 != ~persons_0~0); 1388665#L2760-9 assume !(0 != ~persons_1~0); 1388661#L2774-4 assume !(0 != ~persons_2~0); 1388636#L2788-4 assume !(0 != ~persons_3~0); 1388623#L2802-4 assume !(0 != ~persons_4~0); 1388611#L2816-4 assume !(0 != ~persons_5~0); 1388608#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388467#L438-48 assume 0 == isPersonOnFloor_~floor; 1388438#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388431#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 1388428#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 1388422#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388419#L438-50 assume 0 == isPersonOnFloor_~floor; 1388408#L439-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388382#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 1388369#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 1388367#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388366#L438-52 assume 0 == isPersonOnFloor_~floor; 1388345#L439-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388326#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 1388266#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1388260#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1388258#L438-54 assume 0 == isPersonOnFloor_~floor; 1388225#L439-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1388219#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 1388208#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1383267#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1383265#L438-56 assume 0 == isPersonOnFloor_~floor; 1383250#L439-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1383227#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 1383225#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1383218#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1383217#L438-58 assume 0 == isPersonOnFloor_~floor; 1383195#L439-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1383183#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 1382202#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1382175#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1382171#L382-68 assume !(0 == resetCallOnFloor_~floorID); 1382008#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 1382005#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1381934#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1380156#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1381871#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1368435#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1381867#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1381865#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1381863#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1381861#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1381858#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1381856#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 1380139#L1129-2 assume !false; 1350523#L1130 [2019-12-07 17:19:15,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:15,464 INFO L82 PathProgramCache]: Analyzing trace with hash 1524897971, now seen corresponding path program 1 times [2019-12-07 17:19:15,464 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:15,464 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2138893988] [2019-12-07 17:19:15,464 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:15,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:15,535 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:15,536 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2138893988] [2019-12-07 17:19:15,536 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:15,536 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:15,536 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [992852497] [2019-12-07 17:19:15,537 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:19:15,537 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:15,537 INFO L82 PathProgramCache]: Analyzing trace with hash 479347643, now seen corresponding path program 1 times [2019-12-07 17:19:15,537 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:15,537 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1699534455] [2019-12-07 17:19:15,537 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:15,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:15,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:15,575 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1699534455] [2019-12-07 17:19:15,575 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:15,575 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 17:19:15,576 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556675433] [2019-12-07 17:19:15,576 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:19:15,576 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:15,576 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 17:19:15,576 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-12-07 17:19:15,576 INFO L87 Difference]: Start difference. First operand 102084 states and 192344 transitions. cyclomatic complexity: 90290 Second operand 8 states. [2019-12-07 17:19:26,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:19:26,354 INFO L93 Difference]: Finished difference Result 412473 states and 776371 transitions. [2019-12-07 17:19:26,355 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2019-12-07 17:19:26,355 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 412473 states and 776371 transitions. [2019-12-07 17:19:27,792 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 122223 [2019-12-07 17:19:28,942 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 412473 states to 412473 states and 776371 transitions. [2019-12-07 17:19:28,942 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 295595 [2019-12-07 17:19:29,117 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 295595 [2019-12-07 17:19:29,118 INFO L73 IsDeterministic]: Start isDeterministic. Operand 412473 states and 776371 transitions. [2019-12-07 17:19:29,175 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:29,175 INFO L688 BuchiCegarLoop]: Abstraction has 412473 states and 776371 transitions. [2019-12-07 17:19:29,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412473 states and 776371 transitions. [2019-12-07 17:19:30,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412473 to 101664. [2019-12-07 17:19:30,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 101664 states. [2019-12-07 17:19:31,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101664 states to 101664 states and 191560 transitions. [2019-12-07 17:19:31,095 INFO L711 BuchiCegarLoop]: Abstraction has 101664 states and 191560 transitions. [2019-12-07 17:19:31,095 INFO L591 BuchiCegarLoop]: Abstraction has 101664 states and 191560 transitions. [2019-12-07 17:19:31,095 INFO L424 BuchiCegarLoop]: ======== Iteration 7============ [2019-12-07 17:19:31,096 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 101664 states and 191560 transitions. [2019-12-07 17:19:31,315 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32102 [2019-12-07 17:19:31,315 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:19:31,316 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:19:31,317 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:31,317 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:31,318 INFO L794 eck$LassoCheckResult]: Stem: 1814740#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1814741#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 1814031#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1813399#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 1813400#L1323 assume 0 != main_~tmp~11; 1811125#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1811126#L85 assume !(0 == getOrigin_~person); 1816241#L89 assume !(1 == getOrigin_~person); 1816055#L93 assume !(2 == getOrigin_~person); 1816056#L97 assume !(3 == getOrigin_~person); 1817388#L101 assume !(4 == getOrigin_~person); 1814850#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 1814754#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1814755#L618 assume 0 == initPersonOnFloor_~floor; 1816204#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1810566#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1813735#L410 assume !(0 == callOnFloor_~floorID); 1813495#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1810365#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1811757#L347 assume !(0 == isFloorCalling_~floorID); 1811759#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1816369#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1817719#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1817720#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1817711#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1817712#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1820610#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1820537#L2758 assume !(0 != timeShift_~tmp___9~2); 1820534#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 1820533#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1817728#L347-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814742#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1814743#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1814397#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1814398#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1828342#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1828331#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1828332#L2546 assume !(1 == ~currentHeading~0); 1838338#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1816854#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1810245#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1817707#L347-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814418#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1814419#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1813517#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1810587#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1816855#L347-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1816856#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1831449#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1831448#L2606-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1831447#L347-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1831441#L374-28 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1831414#L2579-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1831413#L2591-3 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1831412#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1831404#L2758-1 assume !(0 != timeShift_~tmp___9~2); 1830915#L2849-3 assume !(1 == ~doorState~0); 1815643#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1815644#L347-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814396#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1813994#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1813995#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1814400#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1830969#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1830958#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1830948#L2546-3 assume !(1 == ~currentHeading~0); 1830940#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1830934#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1830925#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1816976#L347-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1816977#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1813981#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1813982#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1813523#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1813524#L347-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1814347#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1814348#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1814026#L2606-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1814027#L347-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1830801#L374-54 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1830802#L2579-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1836621#L2591-5 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1833749#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1833750#L2758-2 assume !(0 != timeShift_~tmp___9~2); 1833773#L2849-6 assume !(1 == ~doorState~0); 1833774#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1833770#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1818837#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1833766#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1833767#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1836619#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1836744#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1836742#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1836741#L2546-6 assume !(1 == ~currentHeading~0); 1835222#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1833103#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1833097#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1848155#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1842586#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1848154#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1848151#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 1848149#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 1830895#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 1830890#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1816173#L618-1 assume 0 == initPersonOnFloor_~floor; 1816174#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1830846#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1830847#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1845888#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1818562#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1818563#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1818546#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1818547#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1818534#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1818535#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1841588#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1841589#L2758-3 assume !(0 != timeShift_~tmp___9~2); 1845886#L2849-9 assume !(1 == ~doorState~0); 1845885#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1845884#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1845883#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1845882#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 1845880#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1845878#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1845877#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 1845876#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1842413#L2546-9 assume !(1 == ~currentHeading~0); 1842414#L2556-27 assume !(0 == ~currentFloorID~0); 1844843#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1844837#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1844838#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1844831#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1844832#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1844827#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1844828#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1844823#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1844824#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1844815#L941-7 cleanup_~i~2 := 0; 1844816#L1129-2 assume !false; 1858624#L1130 [2019-12-07 17:19:31,318 INFO L796 eck$LassoCheckResult]: Loop: 1858624#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1868656#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1868655#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 1868654#L1137 assume 1 != cleanup_~tmp___0~3; 1868651#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868650#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868649#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 1868648#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1868647#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1868646#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 1868645#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868616#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868615#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1868614#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 1868613#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1868612#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 1868610#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868607#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868608#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 1870678#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 1870677#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1870676#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 1870674#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1870658#L2760-8 assume !(0 != ~persons_0~0); 1870641#L2760-9 assume !(0 != ~persons_1~0); 1870578#L2774-4 assume !(0 != ~persons_2~0); 1870569#L2788-4 assume !(0 != ~persons_3~0); 1870558#L2802-4 assume !(0 != ~persons_4~0); 1870538#L2816-4 assume !(0 != ~persons_5~0); 1870535#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870533#L438-48 assume 0 == isPersonOnFloor_~floor; 1870471#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870462#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 1870446#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 1870434#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870432#L438-50 assume 0 == isPersonOnFloor_~floor; 1870416#L439-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870390#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 1870380#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 1870347#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870326#L438-52 assume 0 == isPersonOnFloor_~floor; 1870306#L439-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870254#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 1870249#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1870225#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870223#L438-54 assume 0 == isPersonOnFloor_~floor; 1870159#L439-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870151#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 1870142#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1870137#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870130#L438-56 assume 0 == isPersonOnFloor_~floor; 1870061#L439-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1870038#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 1870036#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1870029#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 1870028#L438-58 assume 0 == isPersonOnFloor_~floor; 1869999#L439-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 1869986#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 1869981#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1869977#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1869975#L382-68 assume !(0 == resetCallOnFloor_~floorID); 1869972#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 1869970#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1869966#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1869960#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1868667#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1868666#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 1868665#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 1868664#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1868663#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 1868662#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 1868660#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 1868658#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 1868657#L1129-2 assume !false; 1858624#L1130 [2019-12-07 17:19:31,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:31,319 INFO L82 PathProgramCache]: Analyzing trace with hash 1524897971, now seen corresponding path program 2 times [2019-12-07 17:19:31,319 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:31,319 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396998763] [2019-12-07 17:19:31,319 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:31,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:31,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:31,471 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396998763] [2019-12-07 17:19:31,471 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:31,471 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:31,471 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659821244] [2019-12-07 17:19:31,472 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:19:31,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:31,472 INFO L82 PathProgramCache]: Analyzing trace with hash -1975581597, now seen corresponding path program 1 times [2019-12-07 17:19:31,472 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:31,472 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330103972] [2019-12-07 17:19:31,472 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:31,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:31,507 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:31,508 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330103972] [2019-12-07 17:19:31,508 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:31,508 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:31,508 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13394781] [2019-12-07 17:19:31,508 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:19:31,508 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:31,508 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 17:19:31,509 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 17:19:31,509 INFO L87 Difference]: Start difference. First operand 101664 states and 191560 transitions. cyclomatic complexity: 89926 Second operand 6 states. [2019-12-07 17:19:40,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:19:40,008 INFO L93 Difference]: Finished difference Result 277987 states and 516678 transitions. [2019-12-07 17:19:40,008 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 17:19:40,008 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 277987 states and 516678 transitions. [2019-12-07 17:19:40,960 INFO L131 ngComponentsAnalysis]: Automaton has 32 accepting balls. 81808 [2019-12-07 17:19:42,038 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 277987 states to 277987 states and 516678 transitions. [2019-12-07 17:19:42,038 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 210534 [2019-12-07 17:19:42,126 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 210534 [2019-12-07 17:19:42,126 INFO L73 IsDeterministic]: Start isDeterministic. Operand 277987 states and 516678 transitions. [2019-12-07 17:19:42,126 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:42,126 INFO L688 BuchiCegarLoop]: Abstraction has 277987 states and 516678 transitions. [2019-12-07 17:19:42,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277987 states and 516678 transitions. [2019-12-07 17:19:43,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277987 to 101934. [2019-12-07 17:19:43,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 101934 states. [2019-12-07 17:19:43,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101934 states to 101934 states and 189405 transitions. [2019-12-07 17:19:43,551 INFO L711 BuchiCegarLoop]: Abstraction has 101934 states and 189405 transitions. [2019-12-07 17:19:43,551 INFO L591 BuchiCegarLoop]: Abstraction has 101934 states and 189405 transitions. [2019-12-07 17:19:43,552 INFO L424 BuchiCegarLoop]: ======== Iteration 8============ [2019-12-07 17:19:43,552 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 101934 states and 189405 transitions. [2019-12-07 17:19:43,772 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32196 [2019-12-07 17:19:43,772 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:19:43,772 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:19:43,774 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:43,774 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:43,775 INFO L794 eck$LassoCheckResult]: Stem: 2194365#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2194366#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2193702#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2193086#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2193087#L1323 assume 0 != main_~tmp~11; 2190802#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2190803#L85 assume !(0 == getOrigin_~person); 2195898#L89 assume !(1 == getOrigin_~person); 2195704#L93 assume !(2 == getOrigin_~person); 2195705#L97 assume !(3 == getOrigin_~person); 2197032#L101 assume !(4 == getOrigin_~person); 2194472#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2194379#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2194380#L618 assume 0 == initPersonOnFloor_~floor; 2195858#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2190245#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2193421#L410 assume !(0 == callOnFloor_~floorID); 2193180#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2190040#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2191437#L347 assume !(0 == isFloorCalling_~floorID); 2191439#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2198244#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2198243#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2198242#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2198241#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2198221#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2198219#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2198217#L2758 assume !(0 != timeShift_~tmp___9~2); 2198216#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2198215#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2198213#L347-3 assume !(0 == isFloorCalling_~floorID); 2198211#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2198208#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2198207#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2198206#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2198205#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2198204#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2198203#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2197670#L2546 assume !(1 == ~currentHeading~0); 2197671#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2197646#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2197641#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2197638#L347-25 assume !(0 == isFloorCalling_~floorID); 2196408#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2195543#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2198102#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2197995#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2197994#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2197639#L347-26 assume !(0 == isFloorCalling_~floorID); 2197640#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2203343#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2203341#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2203337#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2203338#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2203305#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2203303#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2203301#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2203300#L2849-3 assume !(1 == ~doorState~0); 2203299#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2203297#L347-29 assume !(0 == isFloorCalling_~floorID); 2203295#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2203288#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2203286#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2203284#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2203129#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2203128#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2203125#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2203126#L2546-3 assume !(1 == ~currentHeading~0); 2203005#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2202464#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2202455#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2202448#L347-51 assume !(0 == isFloorCalling_~floorID); 2202449#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2202440#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2202437#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2202431#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2202430#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2202419#L347-52 assume !(0 == isFloorCalling_~floorID); 2196349#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2195395#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2204867#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2204868#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2212829#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2212812#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2212811#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2212809#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2212808#L2849-6 assume !(1 == ~doorState~0); 2212807#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2212806#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2193994#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2193995#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2217327#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2217307#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2217306#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2217305#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2191609#L2546-6 assume !(1 == ~currentHeading~0); 2191610#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2196455#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2214533#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2224330#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2221294#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2224329#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2204598#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2204595#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2204596#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2204586#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2204587#L618-1 assume 0 == initPersonOnFloor_~floor; 2224150#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2204544#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2204545#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2202412#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2202413#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2200885#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2200886#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2200879#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2200880#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2200813#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2193321#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2223835#L2758-3 assume !(0 != timeShift_~tmp___9~2); 2223837#L2849-9 assume !(1 == ~doorState~0); 2195266#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2195267#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2194204#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2193648#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2193649#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2194019#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2233437#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2233435#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2233434#L2546-9 assume !(1 == ~currentHeading~0); 2228012#L2556-27 assume !(0 == ~currentFloorID~0); 2233297#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2233288#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2242574#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2230682#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2242573#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2242572#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2242571#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2242570#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2242568#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2242565#L941-7 cleanup_~i~2 := 0; 2242562#L1129-2 assume !false; 2242563#L1130 [2019-12-07 17:19:43,775 INFO L796 eck$LassoCheckResult]: Loop: 2242563#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2252800#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2252794#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 2252791#L1137 assume 1 != cleanup_~tmp___0~3; 2252783#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252780#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2252773#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2252645#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2252641#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2252631#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 2252558#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252553#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2246572#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2252545#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2252544#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2252543#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2252516#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252515#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2252514#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 2252513#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 2252506#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2254391#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2254390#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2252502#L2760-8 assume !(0 != ~persons_0~0); 2254363#L2760-9 assume !(0 != ~persons_1~0); 2254353#L2774-4 assume !(0 != ~persons_2~0); 2254340#L2788-4 assume !(0 != ~persons_3~0); 2254221#L2802-4 assume !(0 != ~persons_4~0); 2254171#L2816-4 assume !(0 != ~persons_5~0); 2254153#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2254148#L438-48 assume 0 == isPersonOnFloor_~floor; 2254123#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2254079#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 2254074#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 2253250#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253248#L438-50 assume 0 == isPersonOnFloor_~floor; 2253249#L439-25 assume !(0 == isPersonOnFloor_~person); 2253230#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2253206#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 2253193#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 2253191#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253189#L438-52 assume 0 == isPersonOnFloor_~floor; 2253190#L439-26 assume !(0 == isPersonOnFloor_~person); 2253167#L443-26 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2253154#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 2253138#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2253132#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253130#L438-54 assume 0 == isPersonOnFloor_~floor; 2253131#L439-27 assume !(0 == isPersonOnFloor_~person); 2253094#L443-27 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2253088#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 2253077#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2253073#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2253072#L438-56 assume 0 == isPersonOnFloor_~floor; 2253070#L439-28 assume !(0 == isPersonOnFloor_~person); 2252972#L443-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2252940#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 2252936#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2252929#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2252927#L438-58 assume 0 == isPersonOnFloor_~floor; 2252928#L439-29 assume !(0 == isPersonOnFloor_~person); 2252898#L443-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2252886#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 2252881#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2252877#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2252875#L382-68 assume !(0 == resetCallOnFloor_~floorID); 2252872#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2252870#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2252866#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2252859#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2252857#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2247324#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2252855#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2252853#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2252851#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2252849#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2252844#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2252838#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 2252805#L1129-2 assume !false; 2242563#L1130 [2019-12-07 17:19:43,775 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:43,776 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 1 times [2019-12-07 17:19:43,776 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:43,776 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1272661840] [2019-12-07 17:19:43,776 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:43,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:43,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:43,833 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1272661840] [2019-12-07 17:19:43,833 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:43,833 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:43,833 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [57692729] [2019-12-07 17:19:43,833 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:19:43,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:43,834 INFO L82 PathProgramCache]: Analyzing trace with hash 1240642743, now seen corresponding path program 1 times [2019-12-07 17:19:43,834 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:43,834 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [622422062] [2019-12-07 17:19:43,834 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:43,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:43,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:43,851 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [622422062] [2019-12-07 17:19:43,851 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:43,851 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:19:43,851 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416183080] [2019-12-07 17:19:43,852 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:19:43,852 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:43,852 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 17:19:43,852 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 17:19:43,852 INFO L87 Difference]: Start difference. First operand 101934 states and 189405 transitions. cyclomatic complexity: 87501 Second operand 3 states. [2019-12-07 17:19:45,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:19:45,306 INFO L93 Difference]: Finished difference Result 149950 states and 276132 transitions. [2019-12-07 17:19:45,307 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 17:19:45,307 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 149950 states and 276132 transitions. [2019-12-07 17:19:45,803 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 44378 [2019-12-07 17:19:46,182 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 149950 states to 149950 states and 276132 transitions. [2019-12-07 17:19:46,182 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 113703 [2019-12-07 17:19:46,255 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 113703 [2019-12-07 17:19:46,255 INFO L73 IsDeterministic]: Start isDeterministic. Operand 149950 states and 276132 transitions. [2019-12-07 17:19:46,257 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:46,257 INFO L688 BuchiCegarLoop]: Abstraction has 149950 states and 276132 transitions. [2019-12-07 17:19:46,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149950 states and 276132 transitions. [2019-12-07 17:19:47,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149950 to 101934. [2019-12-07 17:19:47,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 101934 states. [2019-12-07 17:19:47,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101934 states to 101934 states and 187465 transitions. [2019-12-07 17:19:47,590 INFO L711 BuchiCegarLoop]: Abstraction has 101934 states and 187465 transitions. [2019-12-07 17:19:47,590 INFO L591 BuchiCegarLoop]: Abstraction has 101934 states and 187465 transitions. [2019-12-07 17:19:47,590 INFO L424 BuchiCegarLoop]: ======== Iteration 9============ [2019-12-07 17:19:47,590 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 101934 states and 187465 transitions. [2019-12-07 17:19:47,814 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 32196 [2019-12-07 17:19:47,814 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:19:47,814 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:19:47,816 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:47,816 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:47,817 INFO L794 eck$LassoCheckResult]: Stem: 2446338#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2446339#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2445652#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2445005#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2445006#L1323 assume 0 != main_~tmp~11; 2442665#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2442666#L85 assume !(0 == getOrigin_~person); 2447872#L89 assume !(1 == getOrigin_~person); 2447682#L93 assume !(2 == getOrigin_~person); 2447683#L97 assume !(3 == getOrigin_~person); 2449015#L101 assume !(4 == getOrigin_~person); 2446445#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2446352#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2446353#L618 assume 0 == initPersonOnFloor_~floor; 2447835#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2442125#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2445348#L410 assume !(0 == callOnFloor_~floorID); 2445100#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2441934#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2443327#L347 assume !(0 == isFloorCalling_~floorID); 2443329#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2451699#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2451702#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2451693#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2451694#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2451675#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2451673#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2451671#L2758 assume !(0 != timeShift_~tmp___9~2); 2451670#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2451669#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2451667#L347-3 assume !(0 == isFloorCalling_~floorID); 2448247#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2448046#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2449385#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2449381#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2449382#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2451399#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2451397#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2451396#L2546 assume !(1 == ~currentHeading~0); 2451395#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2449644#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2449642#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2449630#L347-25 assume !(0 == isFloorCalling_~floorID); 2449631#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2450564#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2450565#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2450555#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2450554#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2449632#L347-26 assume !(0 == isFloorCalling_~floorID); 2449633#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2460841#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2449622#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2449619#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2449615#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2449616#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2460358#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2460356#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2460355#L2849-3 assume !(1 == ~doorState~0); 2460354#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2460352#L347-29 assume !(0 == isFloorCalling_~floorID); 2448363#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2447472#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2450550#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2450547#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2450548#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2453810#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2454248#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2454249#L2546-3 assume !(1 == ~currentHeading~0); 2459933#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2453658#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2453650#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2453643#L347-51 assume !(0 == isFloorCalling_~floorID); 2453645#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2457752#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2457753#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2457743#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2457742#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2453661#L347-52 assume !(0 == isFloorCalling_~floorID); 2453662#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2457714#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2457711#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2457712#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2458217#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2458218#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2457675#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2457676#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2453559#L2849-6 assume !(1 == ~doorState~0); 2453560#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2453551#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2453552#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2470201#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2468274#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2467277#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2467276#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2467267#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2467222#L2546-6 assume !(1 == ~currentHeading~0); 2467204#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2467198#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2467187#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2467188#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2453541#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2467181#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2467168#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2467163#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2467164#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2475318#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2475316#L618-1 assume 0 == initPersonOnFloor_~floor; 2467105#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2467072#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2467066#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2467063#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2464997#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2464996#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2464995#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2464994#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2464842#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2464144#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2445246#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2478884#L2758-3 assume !(0 != timeShift_~tmp___9~2); 2447242#L2849-9 assume !(1 == ~doorState~0); 2447243#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2447246#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2446178#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2445598#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2445599#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2445980#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2481088#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2481084#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2478822#L2546-9 assume !(1 == ~currentHeading~0); 2478823#L2556-27 assume !(0 == ~currentFloorID~0); 2448116#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2441763#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2492408#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2446075#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2446076#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2445110#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2445111#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2507086#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2442750#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2442110#L941-7 cleanup_~i~2 := 0; 2445113#L1129-2 assume !false; 2507927#L1130 [2019-12-07 17:19:47,817 INFO L796 eck$LassoCheckResult]: Loop: 2507927#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2530674#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2530673#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 2530672#L1137 assume 1 != cleanup_~tmp___0~3; 2530671#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530670#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2530669#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2530668#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2530667#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2530666#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 2530665#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530664#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2513305#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2530663#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2530662#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2530661#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2530659#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530658#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2530657#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 2530656#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 2530649#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2531398#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2531387#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2530645#L2760-8 assume !(0 != ~persons_0~0); 2531370#L2760-9 assume !(0 != ~persons_1~0); 2531314#L2774-4 assume !(0 != ~persons_2~0); 2531305#L2788-4 assume !(0 != ~persons_3~0); 2531243#L2802-4 assume !(0 != ~persons_4~0); 2531220#L2816-4 assume !(0 != ~persons_5~0); 2531211#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2531206#L438-48 assume 0 == isPersonOnFloor_~floor; 2531181#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2531167#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 2531163#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 2531152#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2531150#L438-50 assume 0 == isPersonOnFloor_~floor; 2531149#L439-25 assume !(0 == isPersonOnFloor_~person); 2531139#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2531114#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 2531107#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 2531103#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2531100#L438-52 assume 0 == isPersonOnFloor_~floor; 2531101#L439-26 assume !(0 == isPersonOnFloor_~person); 2531105#L443-26 assume !(1 == isPersonOnFloor_~person); 2531029#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2531026#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 2531003#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2530996#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2530994#L438-54 assume 0 == isPersonOnFloor_~floor; 2530993#L439-27 assume !(0 == isPersonOnFloor_~person); 2530992#L443-27 assume !(1 == isPersonOnFloor_~person); 2530923#L447-27 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2530913#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 2530908#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2530904#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2530899#L438-56 assume 0 == isPersonOnFloor_~floor; 2530900#L439-28 assume !(0 == isPersonOnFloor_~person); 2530901#L443-28 assume !(1 == isPersonOnFloor_~person); 2530779#L447-28 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2530760#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 2530758#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2530750#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2530747#L438-58 assume 0 == isPersonOnFloor_~floor; 2530748#L439-29 assume !(0 == isPersonOnFloor_~person); 2530739#L443-29 assume !(1 == isPersonOnFloor_~person); 2530713#L447-29 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2530711#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 2530706#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2530702#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2530700#L382-68 assume !(0 == resetCallOnFloor_~floorID); 2530697#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2530695#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2530691#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2530685#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2530684#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2513806#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2530683#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2530682#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2530681#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2530680#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2530678#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2530676#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 2530675#L1129-2 assume !false; 2507927#L1130 [2019-12-07 17:19:47,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:47,818 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 2 times [2019-12-07 17:19:47,818 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:47,818 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1412632497] [2019-12-07 17:19:47,818 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:47,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:47,872 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:47,872 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1412632497] [2019-12-07 17:19:47,872 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:47,872 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:47,873 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1007494553] [2019-12-07 17:19:47,873 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:19:47,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:47,873 INFO L82 PathProgramCache]: Analyzing trace with hash -866657907, now seen corresponding path program 1 times [2019-12-07 17:19:47,873 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:47,873 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1596848028] [2019-12-07 17:19:47,873 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:47,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:47,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:47,891 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1596848028] [2019-12-07 17:19:47,891 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:47,891 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:19:47,891 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [612985056] [2019-12-07 17:19:47,891 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:19:47,891 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:47,892 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 17:19:47,892 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 17:19:47,892 INFO L87 Difference]: Start difference. First operand 101934 states and 187465 transitions. cyclomatic complexity: 85561 Second operand 3 states. [2019-12-07 17:19:49,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:19:49,409 INFO L93 Difference]: Finished difference Result 171294 states and 315094 transitions. [2019-12-07 17:19:49,410 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 17:19:49,410 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 171294 states and 315094 transitions. [2019-12-07 17:19:49,958 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 54822 [2019-12-07 17:19:50,382 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 171294 states to 171294 states and 315094 transitions. [2019-12-07 17:19:50,382 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130118 [2019-12-07 17:19:50,465 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130118 [2019-12-07 17:19:50,466 INFO L73 IsDeterministic]: Start isDeterministic. Operand 171294 states and 315094 transitions. [2019-12-07 17:19:50,467 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:50,467 INFO L688 BuchiCegarLoop]: Abstraction has 171294 states and 315094 transitions. [2019-12-07 17:19:50,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171294 states and 315094 transitions. [2019-12-07 17:19:51,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171294 to 100964. [2019-12-07 17:19:51,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 100964 states. [2019-12-07 17:19:51,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100964 states to 100964 states and 184555 transitions. [2019-12-07 17:19:51,616 INFO L711 BuchiCegarLoop]: Abstraction has 100964 states and 184555 transitions. [2019-12-07 17:19:51,616 INFO L591 BuchiCegarLoop]: Abstraction has 100964 states and 184555 transitions. [2019-12-07 17:19:51,616 INFO L424 BuchiCegarLoop]: ======== Iteration 10============ [2019-12-07 17:19:51,616 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100964 states and 184555 transitions. [2019-12-07 17:19:51,835 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 31866 [2019-12-07 17:19:51,835 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:19:51,836 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:19:51,837 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:51,838 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:51,838 INFO L794 eck$LassoCheckResult]: Stem: 2719496#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2719497#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2718851#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2718233#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2718234#L1323 assume 0 != main_~tmp~11; 2715909#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2715910#L85 assume !(0 == getOrigin_~person); 2721030#L89 assume !(1 == getOrigin_~person); 2720840#L93 assume !(2 == getOrigin_~person); 2720841#L97 assume !(3 == getOrigin_~person); 2722144#L101 assume !(4 == getOrigin_~person); 2719604#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2719511#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2719512#L618 assume 0 == initPersonOnFloor_~floor; 2720996#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2715367#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2718564#L410 assume !(0 == callOnFloor_~floorID); 2718319#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2715119#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2715120#L347 assume !(0 == isFloorCalling_~floorID); 2722551#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2729788#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2729791#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2729782#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2729783#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2729765#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2729763#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2729761#L2758 assume !(0 != timeShift_~tmp___9~2); 2729760#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2729759#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2729753#L347-3 assume !(0 == isFloorCalling_~floorID); 2729750#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2729747#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2729746#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2729745#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2729571#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2729570#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2729568#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2716725#L2546 assume !(1 == ~currentHeading~0); 2716726#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2724784#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2722782#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2722783#L347-25 assume !(0 == isFloorCalling_~floorID); 2721532#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2720674#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2725462#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2725463#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2722774#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2722771#L347-26 assume !(0 == isFloorCalling_~floorID); 2722773#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2731570#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2731573#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2731564#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2731565#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2731546#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2731544#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2731542#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2731541#L2849-3 assume !(1 == ~doorState~0); 2731540#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2731538#L347-29 assume !(0 == isFloorCalling_~floorID); 2731536#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2731533#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2731532#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2731531#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2723728#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2723724#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2723604#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2723148#L2546-3 assume !(1 == ~currentHeading~0); 2723143#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2722992#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2724700#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2724697#L347-51 assume !(0 == isFloorCalling_~floorID); 2724699#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724690#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2724691#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2724681#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2724680#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2724675#L347-52 assume !(0 == isFloorCalling_~floorID); 2724672#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724669#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2724668#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2724661#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2724659#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2724653#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2724652#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2724650#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2724649#L2849-6 assume !(1 == ~doorState~0); 2724648#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2724646#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724647#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2738914#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2738911#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2738349#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2738347#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2738344#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2738345#L2546-6 assume !(1 == ~currentHeading~0); 2745599#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2742807#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2742801#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2742800#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2724190#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2742799#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2742794#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2742792#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2742791#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 2742785#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2742784#L618-1 assume 0 == initPersonOnFloor_~floor; 2742751#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2742718#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2742648#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2742645#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2742644#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2742641#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2742640#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2739713#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2739712#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2739711#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2718465#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2753101#L2758-3 assume !(0 != timeShift_~tmp___9~2); 2753100#L2849-9 assume !(1 == ~doorState~0); 2753099#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2753098#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2753097#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2753096#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2753095#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2751455#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2748852#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2748853#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2723744#L2546-9 assume !(1 == ~currentHeading~0); 2716694#L2556-27 assume !(0 == ~currentFloorID~0); 2721270#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2752648#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2751965#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2751962#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2751960#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2751961#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2756969#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2756968#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2751952#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2751951#L941-7 cleanup_~i~2 := 0; 2751946#L1129-2 assume !false; 2751947#L1130 [2019-12-07 17:19:51,838 INFO L796 eck$LassoCheckResult]: Loop: 2751947#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2792539#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2792538#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 2792535#L1137 assume 1 != cleanup_~tmp___0~3; 2792534#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792533#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2792531#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2792528#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2792527#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2792526#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 2792525#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792524#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2785383#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2792520#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2792519#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2792518#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2792516#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792515#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2792511#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 2792510#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 2792310#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2793309#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2793298#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2792303#L2760-8 assume !(0 != ~persons_0~0); 2793281#L2760-9 assume !(0 != ~persons_1~0); 2793266#L2774-4 assume !(0 != ~persons_2~0); 2793251#L2788-4 assume !(0 != ~persons_3~0); 2793189#L2802-4 assume !(0 != ~persons_4~0); 2793096#L2816-4 assume !(0 != ~persons_5~0); 2793081#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2793077#L438-48 assume 0 == isPersonOnFloor_~floor; 2793052#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2793039#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 2793025#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 2792983#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792982#L438-50 assume 0 == isPersonOnFloor_~floor; 2792981#L439-25 assume !(0 == isPersonOnFloor_~person); 2792970#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792938#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 2792923#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 2792907#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792903#L438-52 assume 0 == isPersonOnFloor_~floor; 2792900#L439-26 assume !(0 == isPersonOnFloor_~person); 2792897#L443-26 assume !(1 == isPersonOnFloor_~person); 2792878#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792873#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 2792864#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2792814#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792810#L438-54 assume 0 == isPersonOnFloor_~floor; 2792811#L439-27 assume !(0 == isPersonOnFloor_~person); 2792809#L443-27 assume !(1 == isPersonOnFloor_~person); 2792805#L447-27 assume !(2 == isPersonOnFloor_~person); 2792783#L451-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792779#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 2792768#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2792764#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792762#L438-56 assume 0 == isPersonOnFloor_~floor; 2792763#L439-28 assume !(0 == isPersonOnFloor_~person); 2792799#L443-28 assume !(1 == isPersonOnFloor_~person); 2792748#L447-28 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792729#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 2792717#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2792617#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 2792613#L438-58 assume 0 == isPersonOnFloor_~floor; 2792610#L439-29 assume !(0 == isPersonOnFloor_~person); 2792607#L443-29 assume !(1 == isPersonOnFloor_~person); 2792586#L447-29 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 2792584#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 2792573#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2792569#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2792567#L382-68 assume !(0 == resetCallOnFloor_~floorID); 2792564#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2792562#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2792557#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2792551#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2792550#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2785481#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2792549#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2792548#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2792547#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 2792546#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 2792544#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 2792542#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 2792540#L1129-2 assume !false; 2751947#L1130 [2019-12-07 17:19:51,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:51,839 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 3 times [2019-12-07 17:19:51,839 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:51,839 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [768949475] [2019-12-07 17:19:51,839 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:51,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:51,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:51,890 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [768949475] [2019-12-07 17:19:51,890 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:51,891 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:51,891 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117325344] [2019-12-07 17:19:51,891 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:19:51,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:51,891 INFO L82 PathProgramCache]: Analyzing trace with hash 1225979513, now seen corresponding path program 1 times [2019-12-07 17:19:51,891 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:51,891 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1971758421] [2019-12-07 17:19:51,892 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:51,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:51,906 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:51,906 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1971758421] [2019-12-07 17:19:51,906 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:51,906 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:19:51,906 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1498905060] [2019-12-07 17:19:51,907 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:19:51,907 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:51,907 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 17:19:51,907 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 17:19:51,907 INFO L87 Difference]: Start difference. First operand 100964 states and 184555 transitions. cyclomatic complexity: 83621 Second operand 3 states. [2019-12-07 17:19:53,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:19:53,434 INFO L93 Difference]: Finished difference Result 164601 states and 300835 transitions. [2019-12-07 17:19:53,435 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 17:19:53,435 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 164601 states and 300835 transitions. [2019-12-07 17:19:53,969 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 52545 [2019-12-07 17:19:54,375 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 164601 states to 164601 states and 300835 transitions. [2019-12-07 17:19:54,375 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 124943 [2019-12-07 17:19:54,452 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 124943 [2019-12-07 17:19:54,452 INFO L73 IsDeterministic]: Start isDeterministic. Operand 164601 states and 300835 transitions. [2019-12-07 17:19:54,452 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:54,452 INFO L688 BuchiCegarLoop]: Abstraction has 164601 states and 300835 transitions. [2019-12-07 17:19:54,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164601 states and 300835 transitions. [2019-12-07 17:19:55,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164601 to 100479. [2019-12-07 17:19:55,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 100479 states. [2019-12-07 17:19:55,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100479 states to 100479 states and 182130 transitions. [2019-12-07 17:19:55,564 INFO L711 BuchiCegarLoop]: Abstraction has 100479 states and 182130 transitions. [2019-12-07 17:19:55,564 INFO L591 BuchiCegarLoop]: Abstraction has 100479 states and 182130 transitions. [2019-12-07 17:19:55,564 INFO L424 BuchiCegarLoop]: ======== Iteration 11============ [2019-12-07 17:19:55,564 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100479 states and 182130 transitions. [2019-12-07 17:19:55,781 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 31701 [2019-12-07 17:19:55,781 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:19:55,781 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:19:55,783 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:55,783 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:55,784 INFO L794 eck$LassoCheckResult]: Stem: 2985060#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2985061#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 2984426#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2983798#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 2983799#L1323 assume 0 != main_~tmp~11; 2981474#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 2981475#L85 assume !(0 == getOrigin_~person); 2986558#L89 assume !(1 == getOrigin_~person); 2986368#L93 assume !(2 == getOrigin_~person); 2986369#L97 assume !(3 == getOrigin_~person); 2987690#L101 assume !(4 == getOrigin_~person); 2985164#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 2985072#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2985073#L618 assume 0 == initPersonOnFloor_~floor; 2986519#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2980936#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2984131#L410 assume !(0 == callOnFloor_~floorID); 2983884#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2980694#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2980695#L347 assume !(0 == isFloorCalling_~floorID); 2982084#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986698#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988114#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2988113#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2987107#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2984023#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2984025#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2988083#L2758 assume !(0 != timeShift_~tmp___9~2); 2988076#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 2988068#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988053#L347-3 assume !(0 == isFloorCalling_~floorID); 2986932#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986732#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988090#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2988087#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2987110#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2987111#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2988390#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2988391#L2546 assume !(1 == ~currentHeading~0); 2988365#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2988364#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2989639#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988336#L347-25 assume !(0 == isFloorCalling_~floorID); 2988338#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2989485#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2989486#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2988660#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2988659#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988339#L347-26 assume !(0 == isFloorCalling_~floorID); 2987068#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986137#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988304#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2988299#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2988296#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2988293#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2988294#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2988317#L2758-1 assume !(0 != timeShift_~tmp___9~2); 2988313#L2849-3 assume !(1 == ~doorState~0); 2988311#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2988309#L347-29 assume !(0 == isFloorCalling_~floorID); 2987041#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986154#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2988308#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 2997147#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2993497#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2993496#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 2993421#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2993419#L2546-3 assume !(1 == ~currentHeading~0); 2992354#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2992353#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2992317#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2992318#L347-51 assume !(0 == isFloorCalling_~floorID); 2987013#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986046#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2994492#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2994493#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 2996551#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2992308#L347-52 assume !(0 == isFloorCalling_~floorID); 2987015#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2986050#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 2992298#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 2992294#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2992290#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 2992284#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2992281#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 2992277#L2758-2 assume !(0 != timeShift_~tmp___9~2); 2992273#L2849-6 assume !(1 == ~doorState~0); 2992270#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2992267#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2992268#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3006304#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3006301#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3006302#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3006311#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3006308#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3006309#L2546-6 assume !(1 == ~currentHeading~0); 3013491#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2987116#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3013480#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3013479#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2992257#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3013478#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3013474#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3013471#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3013469#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 3013463#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3013461#L618-1 assume 0 == initPersonOnFloor_~floor; 3013431#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3013345#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3011078#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3011073#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3010952#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3010951#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3010950#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3010949#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3010948#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3010946#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3010947#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3014331#L2758-3 assume !(0 != timeShift_~tmp___9~2); 3018157#L2849-9 assume !(1 == ~doorState~0); 3019928#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3019927#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3019926#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3014314#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3014315#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3018986#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3018985#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3018983#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3018982#L2546-9 assume !(1 == ~currentHeading~0); 2986798#L2556-27 assume !(0 == ~currentFloorID~0); 2986799#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3018968#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3037375#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3018959#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3018958#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 2983893#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2983894#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3045885#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3045883#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3045880#L941-7 cleanup_~i~2 := 0; 3045877#L1129-2 assume !false; 3045878#L1130 [2019-12-07 17:19:55,784 INFO L796 eck$LassoCheckResult]: Loop: 3045878#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3055717#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3055716#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 3055715#L1137 assume 1 != cleanup_~tmp___0~3; 3055713#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055712#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3055710#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3055708#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3055706#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3055704#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3055700#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055698#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3048368#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3055696#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3055694#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3055692#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3055689#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055687#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3055685#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 3055683#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 3055337#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3060217#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3060216#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3055329#L2760-8 assume !(0 != ~persons_0~0); 3060201#L2760-9 assume !(0 != ~persons_1~0); 3060197#L2774-4 assume !(0 != ~persons_2~0); 3060172#L2788-4 assume !(0 != ~persons_3~0); 3060159#L2802-4 assume !(0 != ~persons_4~0); 3060147#L2816-4 assume !(0 != ~persons_5~0); 3058599#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3058597#L438-48 assume 0 == isPersonOnFloor_~floor; 3058572#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3058565#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 3058456#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 3058439#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3058437#L438-50 assume 0 == isPersonOnFloor_~floor; 3058436#L439-25 assume !(0 == isPersonOnFloor_~person); 3058426#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3058400#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 3058387#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 3058376#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3058372#L438-52 assume 0 == isPersonOnFloor_~floor; 3058369#L439-26 assume !(0 == isPersonOnFloor_~person); 3058368#L443-26 assume !(1 == isPersonOnFloor_~person); 3058349#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3058346#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 3058267#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3057351#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3057349#L438-54 assume 0 == isPersonOnFloor_~floor; 3057350#L439-27 assume !(0 == isPersonOnFloor_~person); 3057367#L443-27 assume !(1 == isPersonOnFloor_~person); 3057365#L447-27 assume !(2 == isPersonOnFloor_~person); 3057328#L451-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3057324#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 3057313#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3057308#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3057305#L438-56 assume 0 == isPersonOnFloor_~floor; 3057306#L439-28 assume !(0 == isPersonOnFloor_~person); 3057358#L443-28 assume !(1 == isPersonOnFloor_~person); 3057355#L447-28 assume !(2 == isPersonOnFloor_~person); 3057352#L451-28 assume !(3 == isPersonOnFloor_~person); 3057288#L455-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3057256#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 3057229#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3057221#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3057217#L438-58 assume 0 == isPersonOnFloor_~floor; 3057214#L439-29 assume !(0 == isPersonOnFloor_~person); 3057211#L443-29 assume !(1 == isPersonOnFloor_~person); 3057190#L447-29 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3057189#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 3057120#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3057115#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3057097#L382-68 assume !(0 == resetCallOnFloor_~floorID); 3057085#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3057079#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3055737#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3055185#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3055732#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3047629#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3055730#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3055729#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3055728#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3055727#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3055725#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3055723#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 3055167#L1129-2 assume !false; 3045878#L1130 [2019-12-07 17:19:55,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:55,785 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 4 times [2019-12-07 17:19:55,785 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:55,785 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [778154421] [2019-12-07 17:19:55,785 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:55,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:55,835 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:55,836 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [778154421] [2019-12-07 17:19:55,836 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:55,836 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:55,836 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1807624693] [2019-12-07 17:19:55,836 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:19:55,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:55,836 INFO L82 PathProgramCache]: Analyzing trace with hash 1017414814, now seen corresponding path program 1 times [2019-12-07 17:19:55,836 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:55,836 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1930778602] [2019-12-07 17:19:55,837 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:55,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:55,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:55,852 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1930778602] [2019-12-07 17:19:55,852 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:55,852 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 17:19:55,852 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2120285264] [2019-12-07 17:19:55,852 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:19:55,852 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:55,852 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 17:19:55,852 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 17:19:55,852 INFO L87 Difference]: Start difference. First operand 100479 states and 182130 transitions. cyclomatic complexity: 81681 Second operand 3 states. [2019-12-07 17:19:57,146 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:19:57,146 INFO L93 Difference]: Finished difference Result 154703 states and 281176 transitions. [2019-12-07 17:19:57,147 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 17:19:57,147 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 154703 states and 281176 transitions. [2019-12-07 17:19:57,833 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 45995 [2019-12-07 17:19:58,188 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 154703 states to 154703 states and 281176 transitions. [2019-12-07 17:19:58,189 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117378 [2019-12-07 17:19:58,253 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117378 [2019-12-07 17:19:58,253 INFO L73 IsDeterministic]: Start isDeterministic. Operand 154703 states and 281176 transitions. [2019-12-07 17:19:58,254 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:19:58,254 INFO L688 BuchiCegarLoop]: Abstraction has 154703 states and 281176 transitions. [2019-12-07 17:19:58,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154703 states and 281176 transitions. [2019-12-07 17:19:59,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154703 to 100479. [2019-12-07 17:19:59,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 100479 states. [2019-12-07 17:19:59,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100479 states to 100479 states and 180675 transitions. [2019-12-07 17:19:59,295 INFO L711 BuchiCegarLoop]: Abstraction has 100479 states and 180675 transitions. [2019-12-07 17:19:59,295 INFO L591 BuchiCegarLoop]: Abstraction has 100479 states and 180675 transitions. [2019-12-07 17:19:59,295 INFO L424 BuchiCegarLoop]: ======== Iteration 12============ [2019-12-07 17:19:59,296 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100479 states and 180675 transitions. [2019-12-07 17:19:59,514 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 31701 [2019-12-07 17:19:59,515 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:19:59,515 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:19:59,517 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:59,517 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:19:59,517 INFO L794 eck$LassoCheckResult]: Stem: 3240306#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 3240307#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 3239649#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3239000#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 3239001#L1323 assume 0 != main_~tmp~11; 3236687#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3236688#L85 assume !(0 == getOrigin_~person); 3241822#L89 assume !(1 == getOrigin_~person); 3241632#L93 assume !(2 == getOrigin_~person); 3241633#L97 assume !(3 == getOrigin_~person); 3242968#L101 assume !(4 == getOrigin_~person); 3240410#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3240320#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3240321#L618 assume 0 == initPersonOnFloor_~floor; 3241783#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3236138#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3239338#L410 assume !(0 == callOnFloor_~floorID); 3239088#L413 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3235886#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3235887#L347 assume !(0 == isFloorCalling_~floorID); 3237308#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241963#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3243401#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3243402#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3242380#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3242381#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3245903#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3245901#L2758 assume !(0 != timeShift_~tmp___9~2); 3245900#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 3245899#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3245898#L347-3 assume !(0 == isFloorCalling_~floorID); 3245891#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3245888#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3245887#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3245882#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3245881#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3245880#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3245878#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3245877#L2546 assume !(1 == ~currentHeading~0); 3245876#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3243620#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3243621#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3243600#L347-25 assume !(0 == isFloorCalling_~floorID); 3243601#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3245858#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3245855#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3244746#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3244745#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3243602#L347-26 assume !(0 == isFloorCalling_~floorID); 3242342#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241402#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3243597#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3243594#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3243591#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3243586#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3243582#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3243578#L2758-1 assume !(0 != timeShift_~tmp___9~2); 3243575#L2849-3 assume !(1 == ~doorState~0); 3243573#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3243572#L347-29 assume !(0 == isFloorCalling_~floorID); 3242314#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241418#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3243596#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3243592#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3243593#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3251974#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3251887#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3251799#L2546-3 assume !(1 == ~currentHeading~0); 3251785#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3251494#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3247988#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3247985#L347-51 assume !(0 == isFloorCalling_~floorID); 3242286#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3241312#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3253569#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3253562#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3253560#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3253556#L347-52 assume !(0 == isFloorCalling_~floorID); 3253557#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3259312#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3259315#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3259306#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3259307#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3259288#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3259286#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3259284#L2758-2 assume !(0 != timeShift_~tmp___9~2); 3259283#L2849-6 assume !(1 == ~doorState~0); 3259282#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3259280#L347-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3259281#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3262862#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3262861#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3262485#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3262483#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3262481#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3262480#L2546-6 assume !(1 == ~currentHeading~0); 3262367#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3262353#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3262351#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3269431#L347-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3244789#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3269430#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3269426#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3269425#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3269424#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 3269418#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3269417#L618-1 assume 0 == initPersonOnFloor_~floor; 3269384#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3262099#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3260346#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3260328#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3259026#L347-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3259027#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3259019#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3259017#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3259015#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3259012#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3239234#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3271894#L2758-3 assume !(0 != timeShift_~tmp___9~2); 3241185#L2849-9 assume !(1 == ~doorState~0); 3241186#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3241188#L347-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3240138#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3239592#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3239593#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3239945#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3288548#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3288546#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3288545#L2546-9 assume !(1 == ~currentHeading~0); 3242067#L2556-27 assume !(0 == ~currentFloorID~0); 3242068#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3288500#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3292407#L347-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3244936#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3292406#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3292405#L941-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3292404#L1937-15 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3292403#L3230-3 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3288488#L946-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3288486#L941-7 cleanup_~i~2 := 0; 3288482#L1129-2 assume !false; 3288483#L1130 [2019-12-07 17:19:59,517 INFO L796 eck$LassoCheckResult]: Loop: 3288483#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3322877#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3322874#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 3322873#L1137 assume 1 != cleanup_~tmp___0~3; 3322872#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322870#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3322866#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3322865#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3322864#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3322863#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3322860#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322612#L347-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3303019#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3322609#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3322608#L2606-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3322607#L1937-16 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3322604#L2610-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322601#L347-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3322598#L374-110 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 3322595#L2579-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 3322584#L2591-8 stopRequestedAtCurrentFloor_#t~ret85 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret85;havoc stopRequestedAtCurrentFloor_#t~ret85;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3326032#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3326031#L2758-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3322574#L2760-8 assume !(0 != ~persons_0~0); 3326010#L2760-9 assume !(0 != ~persons_1~0); 3325910#L2774-4 assume !(0 != ~persons_2~0); 3325901#L2788-4 assume !(0 != ~persons_3~0); 3325890#L2802-4 assume !(0 != ~persons_4~0); 3325858#L2816-4 assume !(0 != ~persons_5~0); 3325846#L2830-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret87, processWaitingOnFloor_#t~ret88, processWaitingOnFloor_#t~ret89, processWaitingOnFloor_#t~ret90, processWaitingOnFloor_#t~ret91, processWaitingOnFloor_#t~ret92, processWaitingOnFloor_#t~ret93, processWaitingOnFloor_#t~ret94, processWaitingOnFloor_#t~ret95, processWaitingOnFloor_#t~ret96, processWaitingOnFloor_#t~ret97, processWaitingOnFloor_#t~ret98, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~22, processWaitingOnFloor_~tmp___0~10, processWaitingOnFloor_~tmp___1~6, processWaitingOnFloor_~tmp___2~4, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~22;havoc processWaitingOnFloor_~tmp___0~10;havoc processWaitingOnFloor_~tmp___1~6;havoc processWaitingOnFloor_~tmp___2~4;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3325844#L438-48 assume 0 == isPersonOnFloor_~floor; 3325819#L439-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3325812#L610-24 processWaitingOnFloor_#t~ret87 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~10 := processWaitingOnFloor_#t~ret87;havoc processWaitingOnFloor_#t~ret87; 3325809#L2660-8 assume !(0 != processWaitingOnFloor_~tmp___0~10); 3325803#L2660-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3325801#L438-50 assume 0 == isPersonOnFloor_~floor; 3325800#L439-25 assume !(0 == isPersonOnFloor_~person); 3325790#L443-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3325765#L610-25 processWaitingOnFloor_#t~ret89 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~4 := processWaitingOnFloor_#t~ret89;havoc processWaitingOnFloor_#t~ret89; 3325689#L2673-8 assume !(0 != processWaitingOnFloor_~tmp___2~4); 3323679#L2673-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3323677#L438-52 assume 0 == isPersonOnFloor_~floor; 3323678#L439-26 assume !(0 == isPersonOnFloor_~person); 3323667#L443-26 assume !(1 == isPersonOnFloor_~person); 3323648#L447-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3323645#L610-26 processWaitingOnFloor_#t~ret91 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret91;havoc processWaitingOnFloor_#t~ret91; 3323636#L2686-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3323011#L2686-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3323007#L438-54 assume 0 == isPersonOnFloor_~floor; 3323004#L439-27 assume !(0 == isPersonOnFloor_~person); 3323001#L443-27 assume !(1 == isPersonOnFloor_~person); 3323000#L447-27 assume !(2 == isPersonOnFloor_~person); 3322982#L451-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3322978#L610-27 processWaitingOnFloor_#t~ret93 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret93;havoc processWaitingOnFloor_#t~ret93; 3322966#L2699-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3322962#L2699-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3322960#L438-56 assume 0 == isPersonOnFloor_~floor; 3322961#L439-28 assume !(0 == isPersonOnFloor_~person); 3323018#L443-28 assume !(1 == isPersonOnFloor_~person); 3323017#L447-28 assume !(2 == isPersonOnFloor_~person); 3323016#L451-28 assume !(3 == isPersonOnFloor_~person); 3322567#L455-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~4 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3322565#L610-28 processWaitingOnFloor_#t~ret95 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret95;havoc processWaitingOnFloor_#t~ret95; 3322561#L2712-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3322554#L2712-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~4;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~4; 3322551#L438-58 assume !(0 == isPersonOnFloor_~floor); 3322547#L471-58 assume !(1 == isPersonOnFloor_~floor); 3322545#L504-58 assume !(2 == isPersonOnFloor_~floor); 3322543#L537-58 assume !(3 == isPersonOnFloor_~floor); 3322540#L570-87 assume !(4 == isPersonOnFloor_~floor); 3322098#L570-89 isPersonOnFloor_~retValue_acc~4 := 0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~4; 3322097#L610-29 processWaitingOnFloor_#t~ret97 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret97;havoc processWaitingOnFloor_#t~ret97; 3321993#L2725-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3321990#L2725-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3321983#L382-68 assume !(0 == resetCallOnFloor_~floorID); 3321985#L385-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3321936#L394-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3321937#L1908-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3321051#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3322890#L347-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3314149#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3322889#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3322888#L941-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3322887#L1937-19 __utac_acc__Specification14_spec__1_#t~ret7 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~2 := __utac_acc__Specification14_spec__1_#t~ret7;havoc __utac_acc__Specification14_spec__1_#t~ret7;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~2;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~29;isExecutiveFloor_~retValue_acc~29 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~29; 3322886#L3230-4 __utac_acc__Specification14_spec__1_#t~ret8 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~2 := __utac_acc__Specification14_spec__1_#t~ret8;havoc __utac_acc__Specification14_spec__1_#t~ret8; 3322884#L946-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~2; 3322882#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 3321902#L1129-2 assume !false; 3288483#L1130 [2019-12-07 17:19:59,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:59,518 INFO L82 PathProgramCache]: Analyzing trace with hash 74643017, now seen corresponding path program 5 times [2019-12-07 17:19:59,518 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:59,518 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615815463] [2019-12-07 17:19:59,518 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:59,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:59,574 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:59,575 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615815463] [2019-12-07 17:19:59,575 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:59,575 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:19:59,575 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1797429828] [2019-12-07 17:19:59,575 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:19:59,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:19:59,575 INFO L82 PathProgramCache]: Analyzing trace with hash 812050846, now seen corresponding path program 1 times [2019-12-07 17:19:59,575 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:19:59,575 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2147407027] [2019-12-07 17:19:59,575 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:19:59,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:19:59,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:19:59,619 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2147407027] [2019-12-07 17:19:59,619 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:19:59,619 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2019-12-07 17:19:59,619 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [501766271] [2019-12-07 17:19:59,619 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:19:59,619 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:19:59,619 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-12-07 17:19:59,619 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2019-12-07 17:19:59,620 INFO L87 Difference]: Start difference. First operand 100479 states and 180675 transitions. cyclomatic complexity: 80226 Second operand 9 states. [2019-12-07 17:20:23,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:20:23,530 INFO L93 Difference]: Finished difference Result 461453 states and 834023 transitions. [2019-12-07 17:20:23,530 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2019-12-07 17:20:23,531 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 461453 states and 834023 transitions. [2019-12-07 17:20:25,026 INFO L131 ngComponentsAnalysis]: Automaton has 40 accepting balls. 125810 [2019-12-07 17:20:26,223 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 461453 states to 461417 states and 833987 transitions. [2019-12-07 17:20:26,224 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 347079 [2019-12-07 17:20:26,407 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 347079 [2019-12-07 17:20:26,407 INFO L73 IsDeterministic]: Start isDeterministic. Operand 461417 states and 833987 transitions. [2019-12-07 17:20:26,445 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:20:26,445 INFO L688 BuchiCegarLoop]: Abstraction has 461417 states and 833987 transitions. [2019-12-07 17:20:26,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 461417 states and 833987 transitions. [2019-12-07 17:20:28,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 461417 to 119505. [2019-12-07 17:20:28,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 119505 states. [2019-12-07 17:20:29,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119505 states to 119505 states and 214529 transitions. [2019-12-07 17:20:29,001 INFO L711 BuchiCegarLoop]: Abstraction has 119505 states and 214529 transitions. [2019-12-07 17:20:29,001 INFO L591 BuchiCegarLoop]: Abstraction has 119505 states and 214529 transitions. [2019-12-07 17:20:29,001 INFO L424 BuchiCegarLoop]: ======== Iteration 13============ [2019-12-07 17:20:29,001 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 119505 states and 214529 transitions. [2019-12-07 17:20:29,257 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 37454 [2019-12-07 17:20:29,257 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:20:29,257 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:20:29,259 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:20:29,259 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:20:29,259 INFO L794 eck$LassoCheckResult]: Stem: 3802285#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 3802286#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 3801647#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 3800986#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 3800987#L1323 assume 0 != main_~tmp~11; 3798699#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3798700#L85 assume !(0 == getOrigin_~person); 3803816#L89 assume !(1 == getOrigin_~person); 3803624#L93 assume !(2 == getOrigin_~person); 3803625#L97 assume !(3 == getOrigin_~person); 3805008#L101 assume !(4 == getOrigin_~person); 3802383#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 3802297#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3802298#L618 assume 0 == initPersonOnFloor_~floor; 3803777#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3798181#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3801322#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3801323#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805408#L347 assume !(0 == isFloorCalling_~floorID); 3805409#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3806817#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805418#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3805419#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3806809#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3805398#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3805400#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3805442#L2758 assume !(0 != timeShift_~tmp___9~2); 3805443#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 3805402#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805403#L347-3 assume !(0 == isFloorCalling_~floorID); 3804173#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3803971#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805488#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3805489#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3805482#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3805483#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3805444#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3805446#L2546 assume !(1 == ~currentHeading~0); 3807515#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3807507#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3805703#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805704#L347-25 assume !(0 == isFloorCalling_~floorID); 3804369#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3803469#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805725#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3805726#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3806349#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3806350#L347-26 assume !(0 == isFloorCalling_~floorID); 3815077#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3815074#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3815072#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3815069#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3815070#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3815066#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3815067#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3815031#L2758-1 assume !(0 != timeShift_~tmp___9~2); 3807744#L2849-3 assume !(1 == ~doorState~0); 3807745#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3805577#L347-29 assume !(0 == isFloorCalling_~floorID); 3805579#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3805562#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3805563#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3805479#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3805480#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3809641#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3809632#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3809633#L2546-3 assume !(1 == ~currentHeading~0); 3819355#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3819352#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3818992#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3809422#L347-51 assume !(0 == isFloorCalling_~floorID); 3809424#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3818982#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3818981#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3809567#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3809530#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3809425#L347-52 assume !(0 == isFloorCalling_~floorID); 3809426#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3809581#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3809582#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3809576#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3809578#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3809531#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3809532#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3818933#L2758-2 assume !(0 != timeShift_~tmp___9~2); 3818920#L2849-6 assume !(1 == ~doorState~0); 3807949#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3807950#L347-55 assume !(0 == isFloorCalling_~floorID); 3807939#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3807937#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3807925#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3807926#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3818848#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3818937#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3818928#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3818914#L2546-6 assume !(1 == ~currentHeading~0); 3818840#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3818817#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3818812#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3810946#L347-77 assume !(0 == isFloorCalling_~floorID); 3810948#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3810941#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3810942#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3810939#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3809601#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 3809602#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 3810927#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3810924#L618-1 assume 0 == initPersonOnFloor_~floor; 3810925#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3810895#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3810896#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3809405#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3809406#L347-78 assume !(0 == isFloorCalling_~floorID); 3803786#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3803630#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3809565#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3809419#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3809421#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 3809402#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3809404#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3826158#L2758-3 assume !(0 != timeShift_~tmp___9~2); 3841974#L2849-9 assume !(1 == ~doorState~0); 3834079#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3834080#L347-81 assume !(0 == isFloorCalling_~floorID); 3807934#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3807932#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3807923#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3807924#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3833154#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3833155#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3833549#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3833550#L2546-9 assume !(1 == ~currentHeading~0); 3833153#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3833124#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3837317#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3837308#L347-103 assume !(0 == isFloorCalling_~floorID); 3836810#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3836806#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3836804#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3836800#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3836797#L941-7 cleanup_~i~2 := 0; 3836798#L1129-2 assume !false; 3839223#L1130 [2019-12-07 17:20:29,260 INFO L796 eck$LassoCheckResult]: Loop: 3839223#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3872046#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3872042#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 3872041#L1137 assume 1 != cleanup_~tmp___0~3; 3872013#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3872008#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3872006#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3871982#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3871975#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3871972#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 3871970#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3871967#L347-109 assume !(0 == isFloorCalling_~floorID); 3871965#L351-109 assume !(1 == isFloorCalling_~floorID); 3871962#L355-109 assume !(2 == isFloorCalling_~floorID); 3871960#L359-109 assume !(3 == isFloorCalling_~floorID); 3871957#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3871955#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3871949#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 3871947#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3871944#L347-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3871935#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 3871933#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3871929#L1954-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3871924#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 3871921#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 3871918#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3871916#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 3871914#L2758-4 assume !(0 != timeShift_~tmp___9~2); 3871913#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 3871890#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3871880#L347-112 assume !(0 == isFloorCalling_~floorID); 3871846#L351-112 assume !(1 == isFloorCalling_~floorID); 3871847#L355-112 assume !(2 == isFloorCalling_~floorID); 3871848#L359-112 assume !(3 == isFloorCalling_~floorID); 3871844#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3871845#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3875685#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 3875680#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3875681#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3875706#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 3875700#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3875612#L2546-12 assume !(1 == ~currentHeading~0); 3875608#L2556-36 assume !(0 == ~currentFloorID~0); 3872818#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3872768#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3872742#L347-134 assume !(0 == isFloorCalling_~floorID); 3872741#L351-134 assume !(1 == isFloorCalling_~floorID); 3872740#L355-134 assume !(2 == isFloorCalling_~floorID); 3872724#L359-134 assume !(3 == isFloorCalling_~floorID); 3872712#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3872702#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 3872078#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 3872074#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 3872071#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 3872069#L1129-2 assume !false; 3839223#L1130 [2019-12-07 17:20:29,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:20:29,260 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 1 times [2019-12-07 17:20:29,260 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:20:29,260 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2085199829] [2019-12-07 17:20:29,260 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:20:29,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:20:29,308 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:20:29,308 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2085199829] [2019-12-07 17:20:29,308 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:20:29,308 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:20:29,308 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677352006] [2019-12-07 17:20:29,308 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:20:29,309 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:20:29,309 INFO L82 PathProgramCache]: Analyzing trace with hash -166789446, now seen corresponding path program 1 times [2019-12-07 17:20:29,309 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:20:29,309 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480678077] [2019-12-07 17:20:29,309 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:20:29,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:20:29,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:20:29,331 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480678077] [2019-12-07 17:20:29,332 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:20:29,332 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 17:20:29,332 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1564408007] [2019-12-07 17:20:29,332 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:20:29,332 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:20:29,332 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 17:20:29,332 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 17:20:29,332 INFO L87 Difference]: Start difference. First operand 119505 states and 214529 transitions. cyclomatic complexity: 95070 Second operand 7 states. [2019-12-07 17:20:39,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:20:39,127 INFO L93 Difference]: Finished difference Result 554425 states and 993542 transitions. [2019-12-07 17:20:39,127 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2019-12-07 17:20:39,127 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 554425 states and 993542 transitions. [2019-12-07 17:20:40,869 INFO L131 ngComponentsAnalysis]: Automaton has 37 accepting balls. 174291 [2019-12-07 17:20:42,281 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 554425 states to 554425 states and 993542 transitions. [2019-12-07 17:20:42,281 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 386046 [2019-12-07 17:20:42,489 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 386046 [2019-12-07 17:20:42,489 INFO L73 IsDeterministic]: Start isDeterministic. Operand 554425 states and 993542 transitions. [2019-12-07 17:20:42,490 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:20:42,490 INFO L688 BuchiCegarLoop]: Abstraction has 554425 states and 993542 transitions. [2019-12-07 17:20:42,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 554425 states and 993542 transitions. [2019-12-07 17:20:45,154 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 554425 to 118737. [2019-12-07 17:20:45,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 118737 states. [2019-12-07 17:20:45,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118737 states to 118737 states and 213192 transitions. [2019-12-07 17:20:45,355 INFO L711 BuchiCegarLoop]: Abstraction has 118737 states and 213192 transitions. [2019-12-07 17:20:45,355 INFO L591 BuchiCegarLoop]: Abstraction has 118737 states and 213192 transitions. [2019-12-07 17:20:45,355 INFO L424 BuchiCegarLoop]: ======== Iteration 14============ [2019-12-07 17:20:45,355 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 118737 states and 213192 transitions. [2019-12-07 17:20:45,606 INFO L131 ngComponentsAnalysis]: Automaton has 34 accepting balls. 37003 [2019-12-07 17:20:45,606 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:20:45,606 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:20:45,608 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:20:45,608 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:20:45,608 INFO L794 eck$LassoCheckResult]: Stem: 4476028#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 4476029#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 4475405#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4474816#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 4474817#L1323 assume 0 != main_~tmp~11; 4472672#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4472673#L85 assume !(0 == getOrigin_~person); 4477473#L89 assume !(1 == getOrigin_~person); 4477282#L93 assume !(2 == getOrigin_~person); 4477283#L97 assume !(3 == getOrigin_~person); 4478590#L101 assume !(4 == getOrigin_~person); 4476121#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 4476041#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4476042#L618 assume 0 == initPersonOnFloor_~floor; 4477434#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4472166#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4475123#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4475124#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4478939#L347 assume !(0 == isFloorCalling_~floorID); 4477864#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4477599#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4478948#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4478949#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4478022#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4478023#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4478955#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4479676#L2758 assume !(0 != timeShift_~tmp___9~2); 4479677#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 4480498#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4478923#L347-3 assume !(0 == isFloorCalling_~floorID); 4478925#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4476030#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4476031#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4475712#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4475713#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4479021#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4479022#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4480484#L2546 assume !(1 == ~currentHeading~0); 4480478#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4480471#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4480472#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4479840#L347-25 assume !(0 == isFloorCalling_~floorID); 4479842#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4479874#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4479875#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4479860#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4479859#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4479843#L347-26 assume !(0 == isFloorCalling_~floorID); 4479845#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4479872#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4479873#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4479855#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4479857#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4479152#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4479153#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4483988#L2758-1 assume !(0 != timeShift_~tmp___9~2); 4483987#L2849-3 assume !(1 == ~doorState~0); 4483986#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4483984#L347-29 assume !(0 == isFloorCalling_~floorID); 4483982#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4483979#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483978#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4483976#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4483977#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4484555#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4483643#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4483645#L2546-3 assume !(1 == ~currentHeading~0); 4483631#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4483597#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4483582#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4483583#L347-51 assume !(0 == isFloorCalling_~floorID); 4483577#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4483575#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483567#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4483568#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4483557#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4483558#L347-52 assume !(0 == isFloorCalling_~floorID); 4483551#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4483549#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483544#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4483545#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4483539#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4483540#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4487234#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4487232#L2758-2 assume !(0 != timeShift_~tmp___9~2); 4487231#L2849-6 assume !(1 == ~doorState~0); 4487230#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4487228#L347-55 assume !(0 == isFloorCalling_~floorID); 4487226#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4487223#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4487222#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4487220#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4487221#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4488071#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4487959#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4487928#L2546-6 assume !(1 == ~currentHeading~0); 4487191#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4487173#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4487168#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4486847#L347-77 assume !(0 == isFloorCalling_~floorID); 4486849#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4487158#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4487159#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4487148#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4487147#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 4487141#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 4487136#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4487125#L618-1 assume 0 == initPersonOnFloor_~floor; 4487126#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4486841#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4486842#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4486777#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4486778#L347-78 assume !(0 == isFloorCalling_~floorID); 4486772#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4486769#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4486764#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4486765#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4486759#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 4486760#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4506000#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4512972#L2758-3 assume !(0 != timeShift_~tmp___9~2); 4512971#L2849-9 assume !(1 == ~doorState~0); 4512970#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4485482#L347-81 assume !(0 == isFloorCalling_~floorID); 4485480#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4485478#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4483586#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4483587#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4508420#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4508417#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4508413#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4508415#L2546-9 assume !(1 == ~currentHeading~0); 4508397#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4508386#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4514027#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4512916#L347-103 assume !(0 == isFloorCalling_~floorID); 4512918#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4525069#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4525067#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4525063#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4525061#L941-7 cleanup_~i~2 := 0; 4525059#L1129-2 assume !false; 4525060#L1130 [2019-12-07 17:20:45,609 INFO L796 eck$LassoCheckResult]: Loop: 4525060#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 4537393#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 4537389#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 4537390#L1137 assume 1 != cleanup_~tmp___0~3; 4537477#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4537355#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4537356#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 4537339#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 4537334#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 4536149#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 4536150#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4533009#L347-109 assume !(0 == isFloorCalling_~floorID); 4533011#L351-109 assume !(1 == isFloorCalling_~floorID); 4532994#L355-109 assume !(2 == isFloorCalling_~floorID); 4532995#L359-109 assume !(3 == isFloorCalling_~floorID); 4532990#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4532991#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4534281#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 4534282#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4533005#L347-111 assume !(0 == isFloorCalling_~floorID); 4533007#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4532998#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 4532999#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4532984#L1954-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4532981#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 4532972#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 4532974#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 4537455#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 4537453#L2758-4 assume !(0 != timeShift_~tmp___9~2); 4537452#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 4537451#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4537450#L347-112 assume !(0 == isFloorCalling_~floorID); 4537449#L351-112 assume !(1 == isFloorCalling_~floorID); 4537448#L355-112 assume !(2 == isFloorCalling_~floorID); 4537447#L359-112 assume !(3 == isFloorCalling_~floorID); 4537442#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4537443#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4540880#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 4540878#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 4540876#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 4540873#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 4540870#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 4540871#L2546-12 assume !(1 == ~currentHeading~0); 4543297#L2556-36 assume !(0 == ~currentFloorID~0); 4538246#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4537497#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4537421#L347-134 assume !(0 == isFloorCalling_~floorID); 4537423#L351-134 assume !(1 == isFloorCalling_~floorID); 4537417#L355-134 assume !(2 == isFloorCalling_~floorID); 4537418#L359-134 assume !(3 == isFloorCalling_~floorID); 4537413#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4537414#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 4537406#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 4537407#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 4537397#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 4537396#L1129-2 assume !false; 4525060#L1130 [2019-12-07 17:20:45,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:20:45,609 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 2 times [2019-12-07 17:20:45,609 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:20:45,609 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [878012046] [2019-12-07 17:20:45,609 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:20:45,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:20:45,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:20:45,659 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [878012046] [2019-12-07 17:20:45,659 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:20:45,659 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:20:45,659 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1746509250] [2019-12-07 17:20:45,659 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:20:45,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:20:45,660 INFO L82 PathProgramCache]: Analyzing trace with hash -1565384474, now seen corresponding path program 1 times [2019-12-07 17:20:45,660 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:20:45,660 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1395010524] [2019-12-07 17:20:45,660 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:20:45,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:20:45,678 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:20:45,678 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1395010524] [2019-12-07 17:20:45,678 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:20:45,679 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 17:20:45,679 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2048884123] [2019-12-07 17:20:45,679 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:20:45,679 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:20:45,679 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 17:20:45,679 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 17:20:45,679 INFO L87 Difference]: Start difference. First operand 118737 states and 213192 transitions. cyclomatic complexity: 94508 Second operand 5 states. [2019-12-07 17:20:52,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:20:52,234 INFO L93 Difference]: Finished difference Result 509564 states and 912528 transitions. [2019-12-07 17:20:52,234 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 17:20:52,234 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 509564 states and 912528 transitions. [2019-12-07 17:20:53,932 INFO L131 ngComponentsAnalysis]: Automaton has 86 accepting balls. 156008 [2019-12-07 17:20:58,406 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 509564 states to 508544 states and 911120 transitions. [2019-12-07 17:20:58,406 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 383887 [2019-12-07 17:20:58,560 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 383887 [2019-12-07 17:20:58,560 INFO L73 IsDeterministic]: Start isDeterministic. Operand 508544 states and 911120 transitions. [2019-12-07 17:20:58,593 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:20:58,593 INFO L688 BuchiCegarLoop]: Abstraction has 508544 states and 911120 transitions. [2019-12-07 17:20:58,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508544 states and 911120 transitions. [2019-12-07 17:21:00,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508544 to 178901. [2019-12-07 17:21:00,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 178901 states. [2019-12-07 17:21:00,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178901 states to 178901 states and 320074 transitions. [2019-12-07 17:21:00,927 INFO L711 BuchiCegarLoop]: Abstraction has 178901 states and 320074 transitions. [2019-12-07 17:21:00,927 INFO L591 BuchiCegarLoop]: Abstraction has 178901 states and 320074 transitions. [2019-12-07 17:21:00,927 INFO L424 BuchiCegarLoop]: ======== Iteration 15============ [2019-12-07 17:21:00,928 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 178901 states and 320074 transitions. [2019-12-07 17:21:01,286 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 57733 [2019-12-07 17:21:01,287 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:21:01,287 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:21:01,288 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:01,289 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:01,289 INFO L794 eck$LassoCheckResult]: Stem: 5104295#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5104296#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 5103677#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5103091#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 5103092#L1323 assume 0 != main_~tmp~11; 5100984#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5100985#L85 assume !(0 == getOrigin_~person); 5105719#L89 assume !(1 == getOrigin_~person); 5105519#L93 assume !(2 == getOrigin_~person); 5105520#L97 assume !(3 == getOrigin_~person); 5106784#L101 assume !(4 == getOrigin_~person); 5104384#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5104308#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5104309#L618 assume 0 == initPersonOnFloor_~floor; 5105676#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5100481#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5103398#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5103399#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5107093#L347 assume !(0 == isFloorCalling_~floorID); 5106107#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5104319#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5104320#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5107094#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5107095#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5107084#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5107086#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5109652#L2758 assume !(0 != timeShift_~tmp___9~2); 5109653#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 5110754#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5110751#L347-3 assume !(0 == isFloorCalling_~floorID); 5110746#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5110721#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5110712#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5110691#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5110689#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5110688#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5110686#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5110687#L2546 assume !(1 == ~currentHeading~0); 5110905#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5110904#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5111815#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5111813#L347-25 assume !(0 == isFloorCalling_~floorID); 5111812#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5111808#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5111806#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5111802#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5111800#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5111798#L347-26 assume !(0 == isFloorCalling_~floorID); 5111796#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5111792#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5111791#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5111789#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5111788#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5111786#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5111787#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5112517#L2758-1 assume !(0 != timeShift_~tmp___9~2); 5112514#L2849-3 assume !(1 == ~doorState~0); 5112506#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5112499#L347-29 assume !(0 == isFloorCalling_~floorID); 5112453#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5112449#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5112420#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5112417#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5112418#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5112416#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5112408#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5112409#L2546-3 assume !(1 == ~currentHeading~0); 5109762#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5109740#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5108491#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5108479#L347-51 assume !(0 == isFloorCalling_~floorID); 5108475#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5108468#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5108465#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5108459#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5108456#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5108454#L347-52 assume !(0 == isFloorCalling_~floorID); 5108451#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5108448#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5108447#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5108261#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5108260#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5108258#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5108257#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5108255#L2758-2 assume !(0 != timeShift_~tmp___9~2); 5108254#L2849-6 assume !(1 == ~doorState~0); 5108253#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5108251#L347-55 assume !(0 == isFloorCalling_~floorID); 5107940#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5107804#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5107803#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5107801#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5107792#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5107790#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5107787#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5107761#L2546-6 assume !(1 == ~currentHeading~0); 5107755#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5107741#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5107658#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5107656#L347-77 assume !(0 == isFloorCalling_~floorID); 5107654#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5107651#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5107649#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5107645#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5107643#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5107642#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 5107634#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5107632#L618-1 assume 0 == initPersonOnFloor_~floor; 5107602#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5107599#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5107600#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5143288#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5143286#L347-78 assume !(0 == isFloorCalling_~floorID); 5143284#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5143281#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5143278#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5143276#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5143274#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5143270#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5143265#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5143263#L2758-3 assume !(0 != timeShift_~tmp___9~2); 5143262#L2849-9 assume !(1 == ~doorState~0); 5143261#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5143242#L347-81 assume !(0 == isFloorCalling_~floorID); 5143179#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5143175#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5143174#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5143131#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5143127#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5143125#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5143120#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5142886#L2546-9 assume !(1 == ~currentHeading~0); 5142885#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5142832#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5142827#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5144644#L347-103 assume !(0 == isFloorCalling_~floorID); 5144643#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5144639#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5144638#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5144633#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5144631#L941-7 cleanup_~i~2 := 0; 5144627#L1129-2 assume !false; 5144628#L1130 [2019-12-07 17:21:01,289 INFO L796 eck$LassoCheckResult]: Loop: 5144628#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 5202648#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 5202647#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 5202642#L1137 assume 1 != cleanup_~tmp___0~3; 5202641#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202636#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202634#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 5202523#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 5202480#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 5202478#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 5202472#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202445#L347-109 assume !(0 == isFloorCalling_~floorID); 5202440#L351-109 assume !(1 == isFloorCalling_~floorID); 5202441#L355-109 assume !(2 == isFloorCalling_~floorID); 5202442#L359-109 assume !(3 == isFloorCalling_~floorID); 5202438#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202439#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5202469#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5202428#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202429#L347-111 assume !(0 == isFloorCalling_~floorID); 5202278#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202273#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 5202271#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5202270#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 5202269#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5202265#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 5202263#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 5202262#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5202261#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5202259#L2758-4 assume !(0 != timeShift_~tmp___9~2); 5202258#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 5202257#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202255#L347-112 assume !(0 == isFloorCalling_~floorID); 5202254#L351-112 assume !(1 == isFloorCalling_~floorID); 5202253#L355-112 assume !(2 == isFloorCalling_~floorID); 5202252#L359-112 assume !(3 == isFloorCalling_~floorID); 5202246#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202247#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5204570#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5204568#L2489-8 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5204566#L1937-17 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5204530#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5204528#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5204529#L2546-12 assume !(1 == ~currentHeading~0); 5206017#L2556-36 assume !(0 == ~currentFloorID~0); 5203520#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5202617#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5202613#L347-134 assume !(0 == isFloorCalling_~floorID); 5202569#L351-134 assume !(1 == isFloorCalling_~floorID); 5202570#L355-134 assume !(2 == isFloorCalling_~floorID); 5202572#L359-134 assume !(3 == isFloorCalling_~floorID); 5202567#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5202568#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5202657#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5202652#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5202650#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 5202649#L1129-2 assume !false; 5144628#L1130 [2019-12-07 17:21:01,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:01,290 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 3 times [2019-12-07 17:21:01,290 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:01,290 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1200262820] [2019-12-07 17:21:01,290 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:01,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:01,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:01,334 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1200262820] [2019-12-07 17:21:01,334 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:21:01,334 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:21:01,334 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041347776] [2019-12-07 17:21:01,334 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:21:01,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:01,334 INFO L82 PathProgramCache]: Analyzing trace with hash -1394209878, now seen corresponding path program 1 times [2019-12-07 17:21:01,335 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:01,335 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1091976301] [2019-12-07 17:21:01,335 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:01,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:01,351 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:01,351 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1091976301] [2019-12-07 17:21:01,351 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:21:01,351 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 17:21:01,351 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [532140467] [2019-12-07 17:21:01,352 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:21:01,352 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:21:01,352 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 17:21:01,352 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 17:21:01,352 INFO L87 Difference]: Start difference. First operand 178901 states and 320074 transitions. cyclomatic complexity: 141249 Second operand 5 states. [2019-12-07 17:21:05,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:21:05,178 INFO L93 Difference]: Finished difference Result 576199 states and 1027905 transitions. [2019-12-07 17:21:05,179 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 17:21:05,179 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 576199 states and 1027905 transitions. [2019-12-07 17:21:07,602 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 192249 [2019-12-07 17:21:09,045 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 576199 states to 576199 states and 1027905 transitions. [2019-12-07 17:21:09,046 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 437351 [2019-12-07 17:21:09,290 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 437351 [2019-12-07 17:21:09,290 INFO L73 IsDeterministic]: Start isDeterministic. Operand 576199 states and 1027905 transitions. [2019-12-07 17:21:09,352 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:21:09,352 INFO L688 BuchiCegarLoop]: Abstraction has 576199 states and 1027905 transitions. [2019-12-07 17:21:09,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576199 states and 1027905 transitions. [2019-12-07 17:21:15,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576199 to 179369. [2019-12-07 17:21:15,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179369 states. [2019-12-07 17:21:16,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179369 states to 179369 states and 320500 transitions. [2019-12-07 17:21:16,269 INFO L711 BuchiCegarLoop]: Abstraction has 179369 states and 320500 transitions. [2019-12-07 17:21:16,270 INFO L591 BuchiCegarLoop]: Abstraction has 179369 states and 320500 transitions. [2019-12-07 17:21:16,270 INFO L424 BuchiCegarLoop]: ======== Iteration 16============ [2019-12-07 17:21:16,270 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 179369 states and 320500 transitions. [2019-12-07 17:21:16,631 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 57828 [2019-12-07 17:21:16,631 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:21:16,631 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:21:16,633 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:16,633 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:16,634 INFO L794 eck$LassoCheckResult]: Stem: 5859322#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5859323#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 5858724#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 5858169#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 5858170#L1323 assume 0 != main_~tmp~11; 5856107#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5856108#L85 assume !(0 == getOrigin_~person); 5860695#L89 assume !(1 == getOrigin_~person); 5860511#L93 assume !(2 == getOrigin_~person); 5860512#L97 assume !(3 == getOrigin_~person); 5861744#L101 assume !(4 == getOrigin_~person); 5859408#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 5859334#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5859335#L618 assume 0 == initPersonOnFloor_~floor; 5860657#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5855607#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5858470#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5855372#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5855373#L347 assume !(0 == isFloorCalling_~floorID); 5862046#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5862051#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5862052#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5862047#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5862048#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5862039#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5862041#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5864754#L2758 assume !(0 != timeShift_~tmp___9~2); 5864755#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 5860151#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5860152#L347-3 assume !(0 == isFloorCalling_~floorID); 5862124#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5862120#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5862101#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5862102#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5861206#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5859819#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5859612#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5859614#L2546 assume !(1 == ~currentHeading~0); 5867160#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5867152#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5867153#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5866183#L347-25 assume !(0 == isFloorCalling_~floorID); 5866185#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5873495#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5873494#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5866169#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5866165#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5866163#L347-26 assume !(0 == isFloorCalling_~floorID); 5866164#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5868531#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5868532#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5868527#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5868528#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5866138#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5866139#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5891427#L2758-1 assume !(0 != timeShift_~tmp___9~2); 5891392#L2849-3 assume !(1 == ~doorState~0); 5891393#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5868533#L347-29 assume !(0 == isFloorCalling_~floorID); 5868535#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5891846#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5891845#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5891843#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5891841#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5891788#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5891603#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5891579#L2546-3 assume !(1 == ~currentHeading~0); 5891520#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5891518#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5891060#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886671#L347-51 assume !(0 == isFloorCalling_~floorID); 5886673#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886662#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886663#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5886502#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5886501#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886484#L347-52 assume !(0 == isFloorCalling_~floorID); 5886485#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886476#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886477#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5886472#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5886473#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5886467#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5886469#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5886462#L2758-2 assume !(0 != timeShift_~tmp___9~2); 5886463#L2849-6 assume !(1 == ~doorState~0); 5886458#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886459#L347-55 assume !(0 == isFloorCalling_~floorID); 5886455#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886452#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886427#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5886428#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5891242#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5891087#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5891065#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5891066#L2546-6 assume !(1 == ~currentHeading~0); 5896614#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5893463#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5886637#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5886638#L347-77 assume !(0 == isFloorCalling_~floorID); 5886632#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5886575#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5886524#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5886525#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5920059#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 5920058#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 5920052#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5920050#L618-1 assume 0 == initPersonOnFloor_~floor; 5871246#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5871241#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5871242#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5871113#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5871108#L347-78 assume !(0 == isFloorCalling_~floorID); 5871110#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5871092#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5871093#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5871082#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5871084#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 5871056#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5871058#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5927517#L2758-3 assume !(0 != timeShift_~tmp___9~2); 5871031#L2849-9 assume !(1 == ~doorState~0); 5870951#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5870952#L347-81 assume !(0 == isFloorCalling_~floorID); 5932764#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5932760#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5932759#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5932757#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 5932755#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5932638#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5932457#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5932288#L2546-9 assume !(1 == ~currentHeading~0); 5932266#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5932003#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5922190#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5922188#L347-103 assume !(0 == isFloorCalling_~floorID); 5922187#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5922178#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5922175#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 5922170#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 5922166#L941-7 cleanup_~i~2 := 0; 5922162#L1129-2 assume !false; 5922163#L1130 [2019-12-07 17:21:16,634 INFO L796 eck$LassoCheckResult]: Loop: 5922163#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 6009840#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 6009837#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 6009836#L1137 assume 1 != cleanup_~tmp___0~3; 6009835#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6009822#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6009823#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 6009039#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 6009028#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 6009020#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 5971030#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5971031#L347-109 assume !(0 == isFloorCalling_~floorID); 5970434#L351-109 assume !(1 == isFloorCalling_~floorID); 5970435#L355-109 assume !(2 == isFloorCalling_~floorID); 5970438#L359-109 assume !(3 == isFloorCalling_~floorID); 5970439#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5984897#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5992879#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 5992878#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5992877#L347-111 assume !(0 == isFloorCalling_~floorID); 5984892#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5984888#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 5984887#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 5984886#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 5984885#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 5984881#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 5984879#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 5984878#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 5984869#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 5984861#L2758-4 assume !(0 != timeShift_~tmp___9~2); 5984852#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 5984796#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5973240#L347-112 assume !(0 == isFloorCalling_~floorID); 5973241#L351-112 assume !(1 == isFloorCalling_~floorID); 5973236#L355-112 assume !(2 == isFloorCalling_~floorID); 5973237#L359-112 assume !(3 == isFloorCalling_~floorID); 5973232#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5973233#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 5973254#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 5973255#L2489-8 assume !(0 != stopRequestedInDirection_~tmp___0~7);stopRequestedInDirection__wrappee__base_#in~dir, stopRequestedInDirection__wrappee__base_#in~respectFloorCalls, stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_#res;havoc stopRequestedInDirection__wrappee__base_#t~ret66, stopRequestedInDirection__wrappee__base_#t~ret67, stopRequestedInDirection__wrappee__base_#t~ret68, stopRequestedInDirection__wrappee__base_#t~ret69, stopRequestedInDirection__wrappee__base_#t~ret70, stopRequestedInDirection__wrappee__base_#t~ret71, stopRequestedInDirection__wrappee__base_#t~ret72, stopRequestedInDirection__wrappee__base_#t~ret73, stopRequestedInDirection__wrappee__base_#t~ret74, stopRequestedInDirection__wrappee__base_#t~ret75, stopRequestedInDirection__wrappee__base_#t~ret76, stopRequestedInDirection__wrappee__base_~dir, stopRequestedInDirection__wrappee__base_~respectFloorCalls, stopRequestedInDirection__wrappee__base_~respectInLiftCalls, stopRequestedInDirection__wrappee__base_~retValue_acc~21, stopRequestedInDirection__wrappee__base_~tmp~17, stopRequestedInDirection__wrappee__base_~tmp___0~6, stopRequestedInDirection__wrappee__base_~tmp___1~5, stopRequestedInDirection__wrappee__base_~tmp___2~3, stopRequestedInDirection__wrappee__base_~tmp___3~1, stopRequestedInDirection__wrappee__base_~tmp___4~0, stopRequestedInDirection__wrappee__base_~tmp___5~0, stopRequestedInDirection__wrappee__base_~tmp___6~0, stopRequestedInDirection__wrappee__base_~tmp___7~0, stopRequestedInDirection__wrappee__base_~tmp___8~0, stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~dir := stopRequestedInDirection__wrappee__base_#in~dir;stopRequestedInDirection__wrappee__base_~respectFloorCalls := stopRequestedInDirection__wrappee__base_#in~respectFloorCalls;stopRequestedInDirection__wrappee__base_~respectInLiftCalls := stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__base_~tmp~17;havoc stopRequestedInDirection__wrappee__base_~tmp___0~6;havoc stopRequestedInDirection__wrappee__base_~tmp___1~5;havoc stopRequestedInDirection__wrappee__base_~tmp___2~3;havoc stopRequestedInDirection__wrappee__base_~tmp___3~1;havoc stopRequestedInDirection__wrappee__base_~tmp___4~0;havoc stopRequestedInDirection__wrappee__base_~tmp___5~0;havoc stopRequestedInDirection__wrappee__base_~tmp___6~0;havoc stopRequestedInDirection__wrappee__base_~tmp___7~0;havoc stopRequestedInDirection__wrappee__base_~tmp___8~0;havoc stopRequestedInDirection__wrappee__base_~tmp___9~0; 5984794#L2141-8 assume 1 == stopRequestedInDirection__wrappee__base_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 5984793#L921-20 stopRequestedInDirection__wrappee__base_#t~ret66 := isTopFloor_#res;stopRequestedInDirection__wrappee__base_~tmp~17 := stopRequestedInDirection__wrappee__base_#t~ret66;havoc stopRequestedInDirection__wrappee__base_#t~ret66; 5973201#L2145-8 assume 0 != stopRequestedInDirection__wrappee__base_~tmp~17;stopRequestedInDirection__wrappee__base_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__base_#res := stopRequestedInDirection__wrappee__base_~retValue_acc~21; 5973166#L2463-8 stopRequestedInDirection_#t~ret79 := stopRequestedInDirection__wrappee__base_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 5973149#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 5973145#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 5973146#L2546-12 assume !(1 == ~currentHeading~0); 5998058#L2556-36 assume !(0 == ~currentFloorID~0); 5992187#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5991930#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 5991923#L347-134 assume !(0 == isFloorCalling_~floorID); 5991924#L351-134 assume !(1 == isFloorCalling_~floorID); 5991920#L355-134 assume !(2 == isFloorCalling_~floorID); 5991921#L359-134 assume !(3 == isFloorCalling_~floorID); 5991915#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5991916#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6009918#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6009914#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6009912#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 6009909#L1129-2 assume !false; 5922163#L1130 [2019-12-07 17:21:16,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:16,634 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 4 times [2019-12-07 17:21:16,635 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:16,635 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [760549068] [2019-12-07 17:21:16,635 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:16,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:16,681 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:16,681 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [760549068] [2019-12-07 17:21:16,681 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:21:16,681 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:21:16,681 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [260658440] [2019-12-07 17:21:16,681 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:21:16,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:16,682 INFO L82 PathProgramCache]: Analyzing trace with hash 1035554732, now seen corresponding path program 1 times [2019-12-07 17:21:16,682 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:16,682 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1406075046] [2019-12-07 17:21:16,682 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:16,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:16,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:16,698 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1406075046] [2019-12-07 17:21:16,698 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:21:16,698 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 17:21:16,699 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568073435] [2019-12-07 17:21:16,699 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:21:16,699 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:21:16,699 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 17:21:16,699 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 17:21:16,699 INFO L87 Difference]: Start difference. First operand 179369 states and 320500 transitions. cyclomatic complexity: 141207 Second operand 5 states. [2019-12-07 17:21:18,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:21:18,269 INFO L93 Difference]: Finished difference Result 439044 states and 779270 transitions. [2019-12-07 17:21:18,269 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 17:21:18,269 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 439044 states and 779270 transitions. [2019-12-07 17:21:20,156 INFO L131 ngComponentsAnalysis]: Automaton has 112 accepting balls. 153911 [2019-12-07 17:21:21,286 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 439044 states to 439044 states and 779270 transitions. [2019-12-07 17:21:21,286 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 329232 [2019-12-07 17:21:21,492 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 329232 [2019-12-07 17:21:21,492 INFO L73 IsDeterministic]: Start isDeterministic. Operand 439044 states and 779270 transitions. [2019-12-07 17:21:21,493 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:21:21,493 INFO L688 BuchiCegarLoop]: Abstraction has 439044 states and 779270 transitions. [2019-12-07 17:21:21,723 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439044 states and 779270 transitions. [2019-12-07 17:21:24,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439044 to 179874. [2019-12-07 17:21:24,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179874 states. [2019-12-07 17:21:24,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179874 states to 179874 states and 320974 transitions. [2019-12-07 17:21:24,348 INFO L711 BuchiCegarLoop]: Abstraction has 179874 states and 320974 transitions. [2019-12-07 17:21:24,348 INFO L591 BuchiCegarLoop]: Abstraction has 179874 states and 320974 transitions. [2019-12-07 17:21:24,348 INFO L424 BuchiCegarLoop]: ======== Iteration 17============ [2019-12-07 17:21:24,348 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 179874 states and 320974 transitions. [2019-12-07 17:21:24,695 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 57895 [2019-12-07 17:21:24,696 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:21:24,696 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:21:24,698 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:24,698 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:24,698 INFO L794 eck$LassoCheckResult]: Stem: 6477959#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6477960#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 6477326#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6476725#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 6476726#L1323 assume 0 != main_~tmp~11; 6474572#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6474573#L85 assume !(0 == getOrigin_~person); 6479418#L89 assume !(1 == getOrigin_~person); 6479219#L93 assume !(2 == getOrigin_~person); 6479220#L97 assume !(3 == getOrigin_~person); 6480541#L101 assume !(4 == getOrigin_~person); 6478044#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 6477971#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6477972#L618 assume 0 == initPersonOnFloor_~floor; 6479375#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6474052#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6477040#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6477041#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6480870#L347 assume !(0 == isFloorCalling_~floorID); 6479809#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6479540#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6480885#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6480881#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6479944#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6479945#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6480880#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6480927#L2758 assume !(0 != timeShift_~tmp___9~2); 6481054#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 6485575#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6485573#L347-3 assume !(0 == isFloorCalling_~floorID); 6485572#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6485569#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6481040#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6481041#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6480956#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6480957#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6480948#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6480949#L2546 assume !(1 == ~currentHeading~0); 6485808#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6485802#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6485511#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6485512#L347-25 assume !(0 == isFloorCalling_~floorID); 6537698#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6485956#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6485957#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6485942#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6483878#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6483879#L347-26 assume !(0 == isFloorCalling_~floorID); 6479924#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6478998#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6483883#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6483884#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6555747#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6555741#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6555738#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6555734#L2758-1 assume !(0 != timeShift_~tmp___9~2); 6555731#L2849-3 assume !(1 == ~doorState~0); 6555719#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6555715#L347-29 assume !(0 == isFloorCalling_~floorID); 6555710#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6555691#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6555670#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6555664#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6555655#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6555307#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6555301#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6555227#L2546-3 assume !(1 == ~currentHeading~0); 6555151#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6555149#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6554449#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6554447#L347-51 assume !(0 == isFloorCalling_~floorID); 6554445#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6554442#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6554441#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6554380#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6541658#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6541659#L347-52 assume !(0 == isFloorCalling_~floorID); 6544539#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6544536#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6544535#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6544533#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6544532#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6544529#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6544531#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6556219#L2758-2 assume !(0 != timeShift_~tmp___9~2); 6556208#L2849-6 assume !(1 == ~doorState~0); 6555960#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6555958#L347-55 assume !(0 == isFloorCalling_~floorID); 6555956#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6555953#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6555951#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6555943#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6555877#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6555876#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6555874#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6555873#L2546-6 assume !(1 == ~currentHeading~0); 6555872#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6555856#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6555849#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6555847#L347-77 assume !(0 == isFloorCalling_~floorID); 6555845#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6555842#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6555841#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6555836#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6555834#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6555833#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 6555827#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6555826#L618-1 assume 0 == initPersonOnFloor_~floor; 6555793#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6555791#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6555790#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6551196#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6551187#L347-78 assume !(0 == isFloorCalling_~floorID); 6551185#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6551181#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6551180#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6551178#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6551177#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6551174#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6551176#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6593007#L2758-3 assume !(0 != timeShift_~tmp___9~2); 6593004#L2849-9 assume !(1 == ~doorState~0); 6592998#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6592989#L347-81 assume !(0 == isFloorCalling_~floorID); 6592975#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6592963#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6592946#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6592770#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6592584#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6592580#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6592572#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6592521#L2546-9 assume !(1 == ~currentHeading~0); 6592446#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6592444#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6591744#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6591742#L347-103 assume !(0 == isFloorCalling_~floorID); 6591741#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6591737#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6591736#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6591731#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6591729#L941-7 cleanup_~i~2 := 0; 6591721#L1129-2 assume !false; 6559724#L1130 [2019-12-07 17:21:24,698 INFO L796 eck$LassoCheckResult]: Loop: 6559724#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 6559723#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 6559722#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 6559721#L1137 assume 1 != cleanup_~tmp___0~3; 6559720#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6559718#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6559719#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 6559688#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 6559682#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 6559681#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 6527925#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6527922#L347-109 assume !(0 == isFloorCalling_~floorID); 6519649#L351-109 assume !(1 == isFloorCalling_~floorID); 6519650#L355-109 assume !(2 == isFloorCalling_~floorID); 6519651#L359-109 assume !(3 == isFloorCalling_~floorID); 6519647#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6519648#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6523953#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6523921#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6523917#L347-111 assume !(0 == isFloorCalling_~floorID); 6519693#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6519679#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 6519652#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 6519646#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 6519644#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 6519635#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 6519602#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 6519587#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6519573#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6519562#L2758-4 assume !(0 != timeShift_~tmp___9~2); 6519556#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 6519548#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6519542#L347-112 assume !(0 == isFloorCalling_~floorID); 6519519#L351-112 assume !(1 == isFloorCalling_~floorID); 6519520#L355-112 assume !(2 == isFloorCalling_~floorID); 6519523#L359-112 assume !(3 == isFloorCalling_~floorID); 6519517#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6519518#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6542140#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6542068#L2489-8 assume !(0 != stopRequestedInDirection_~tmp___0~7);stopRequestedInDirection__wrappee__base_#in~dir, stopRequestedInDirection__wrappee__base_#in~respectFloorCalls, stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_#res;havoc stopRequestedInDirection__wrappee__base_#t~ret66, stopRequestedInDirection__wrappee__base_#t~ret67, stopRequestedInDirection__wrappee__base_#t~ret68, stopRequestedInDirection__wrappee__base_#t~ret69, stopRequestedInDirection__wrappee__base_#t~ret70, stopRequestedInDirection__wrappee__base_#t~ret71, stopRequestedInDirection__wrappee__base_#t~ret72, stopRequestedInDirection__wrappee__base_#t~ret73, stopRequestedInDirection__wrappee__base_#t~ret74, stopRequestedInDirection__wrappee__base_#t~ret75, stopRequestedInDirection__wrappee__base_#t~ret76, stopRequestedInDirection__wrappee__base_~dir, stopRequestedInDirection__wrappee__base_~respectFloorCalls, stopRequestedInDirection__wrappee__base_~respectInLiftCalls, stopRequestedInDirection__wrappee__base_~retValue_acc~21, stopRequestedInDirection__wrappee__base_~tmp~17, stopRequestedInDirection__wrappee__base_~tmp___0~6, stopRequestedInDirection__wrappee__base_~tmp___1~5, stopRequestedInDirection__wrappee__base_~tmp___2~3, stopRequestedInDirection__wrappee__base_~tmp___3~1, stopRequestedInDirection__wrappee__base_~tmp___4~0, stopRequestedInDirection__wrappee__base_~tmp___5~0, stopRequestedInDirection__wrappee__base_~tmp___6~0, stopRequestedInDirection__wrappee__base_~tmp___7~0, stopRequestedInDirection__wrappee__base_~tmp___8~0, stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~dir := stopRequestedInDirection__wrappee__base_#in~dir;stopRequestedInDirection__wrappee__base_~respectFloorCalls := stopRequestedInDirection__wrappee__base_#in~respectFloorCalls;stopRequestedInDirection__wrappee__base_~respectInLiftCalls := stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__base_~tmp~17;havoc stopRequestedInDirection__wrappee__base_~tmp___0~6;havoc stopRequestedInDirection__wrappee__base_~tmp___1~5;havoc stopRequestedInDirection__wrappee__base_~tmp___2~3;havoc stopRequestedInDirection__wrappee__base_~tmp___3~1;havoc stopRequestedInDirection__wrappee__base_~tmp___4~0;havoc stopRequestedInDirection__wrappee__base_~tmp___5~0;havoc stopRequestedInDirection__wrappee__base_~tmp___6~0;havoc stopRequestedInDirection__wrappee__base_~tmp___7~0;havoc stopRequestedInDirection__wrappee__base_~tmp___8~0;havoc stopRequestedInDirection__wrappee__base_~tmp___9~0; 6542061#L2141-8 assume !(1 == stopRequestedInDirection__wrappee__base_~dir); 6542062#L2310-8 assume !(0 == ~currentFloorID~0); 6542127#L2316-8 assume !(~currentFloorID~0 > 0); 6481446#L2331-8 assume ~currentFloorID~0 > 0; 6542043#L2333-8 assume 0 != stopRequestedInDirection__wrappee__base_~respectInLiftCalls; 6541981#L2334-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__base_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__base_#res := stopRequestedInDirection__wrappee__base_~retValue_acc~21; 6541974#L2463-8 stopRequestedInDirection_#t~ret79 := stopRequestedInDirection__wrappee__base_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6541898#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6541899#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6552240#L2546-12 assume !(1 == ~currentHeading~0); 6552237#L2556-36 assume !(0 == ~currentFloorID~0); 6552230#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6552215#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6552213#L347-134 assume !(0 == isFloorCalling_~floorID); 6552153#L351-134 assume !(1 == isFloorCalling_~floorID); 6552154#L355-134 assume !(2 == isFloorCalling_~floorID); 6552156#L359-134 assume !(3 == isFloorCalling_~floorID); 6552151#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6552152#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6607104#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6607096#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6606402#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 6559725#L1129-2 assume !false; 6559724#L1130 [2019-12-07 17:21:24,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:24,699 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 5 times [2019-12-07 17:21:24,699 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:24,699 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [401931826] [2019-12-07 17:21:24,699 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:24,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:24,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:24,742 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [401931826] [2019-12-07 17:21:24,742 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:21:24,742 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:21:24,742 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769752028] [2019-12-07 17:21:24,743 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:21:24,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:24,743 INFO L82 PathProgramCache]: Analyzing trace with hash 714769979, now seen corresponding path program 1 times [2019-12-07 17:21:24,743 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:24,743 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [525506932] [2019-12-07 17:21:24,743 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:24,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:24,771 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:24,771 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [525506932] [2019-12-07 17:21:24,771 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:21:24,771 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 17:21:24,771 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [110460120] [2019-12-07 17:21:24,771 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 17:21:24,771 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:21:24,772 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 17:21:24,772 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 17:21:24,772 INFO L87 Difference]: Start difference. First operand 179874 states and 320974 transitions. cyclomatic complexity: 141176 Second operand 4 states. [2019-12-07 17:21:27,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:21:27,507 INFO L93 Difference]: Finished difference Result 308689 states and 548916 transitions. [2019-12-07 17:21:27,508 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 17:21:27,508 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 308689 states and 548916 transitions. [2019-12-07 17:21:28,916 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 96965 [2019-12-07 17:21:29,626 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 308689 states to 308497 states and 548724 transitions. [2019-12-07 17:21:29,626 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 232909 [2019-12-07 17:21:29,751 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 232909 [2019-12-07 17:21:29,751 INFO L73 IsDeterministic]: Start isDeterministic. Operand 308497 states and 548724 transitions. [2019-12-07 17:21:29,758 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 17:21:29,758 INFO L688 BuchiCegarLoop]: Abstraction has 308497 states and 548724 transitions. [2019-12-07 17:21:29,916 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308497 states and 548724 transitions. [2019-12-07 17:21:35,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308497 to 246994. [2019-12-07 17:21:35,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 246994 states. [2019-12-07 17:21:35,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246994 states to 246994 states and 438350 transitions. [2019-12-07 17:21:35,471 INFO L711 BuchiCegarLoop]: Abstraction has 246994 states and 438350 transitions. [2019-12-07 17:21:35,471 INFO L591 BuchiCegarLoop]: Abstraction has 246994 states and 438350 transitions. [2019-12-07 17:21:35,471 INFO L424 BuchiCegarLoop]: ======== Iteration 18============ [2019-12-07 17:21:35,471 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 246994 states and 438350 transitions. [2019-12-07 17:21:35,964 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 80767 [2019-12-07 17:21:35,964 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 17:21:35,964 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 17:21:35,966 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:35,966 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 17:21:35,967 INFO L794 eck$LassoCheckResult]: Stem: 6966579#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(21);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(21);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(30);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(9);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(25);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(25);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(10);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string112.base, #t~string112.offset, 1);call write~init~int(95, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(93, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string114.base, #t~string114.offset, 1);call write~init~int(93, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(32, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 3 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(97, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(116, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(32, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string118.base, #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 2 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(10);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string122.base, #t~string122.offset, 1);call write~init~int(112, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 2 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string124.base, #t~string124.offset, 1);call write~init~int(111, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(119, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(110, #t~string124.base, 3 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 4 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(73, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(76, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(95, #t~string126.base, 3 + #t~string126.offset, 1);call write~init~int(112, #t~string126.base, 4 + #t~string126.offset, 1);call write~init~int(58, #t~string126.base, 5 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 6 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(37, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(105, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 3 + #t~string130.offset, 1);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string132.base, #t~string132.offset, 1);call write~init~int(37, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(105, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 3 + #t~string132.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string138.base, #t~string138.offset, 1);call write~init~int(70, #t~string138.base, 1 + #t~string138.offset, 1);call write~init~int(95, #t~string138.base, 2 + #t~string138.offset, 1);call write~init~int(112, #t~string138.base, 3 + #t~string138.offset, 1);call write~init~int(58, #t~string138.base, 4 + #t~string138.offset, 1);call write~init~int(0, #t~string138.base, 5 + #t~string138.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string155.base, #t~string155.offset, 1);call write~init~int(0, #t~string155.base, 1 + #t~string155.offset, 1);~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6966580#L-1 havoc main_#res;havoc main_#t~ret23, main_~retValue_acc~7, main_~tmp~11;havoc main_~retValue_acc~7;havoc main_~tmp~11; 6965937#L1725 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 6965310#L1733 main_#t~ret23 := valid_product_#res;main_~tmp~11 := main_#t~ret23;havoc main_#t~ret23; 6965311#L1323 assume 0 != main_~tmp~11; 6963135#L1297 havoc bigMacCall_#t~ret16, bigMacCall_~tmp~8;havoc bigMacCall_~tmp~8;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6963136#L85 assume !(0 == getOrigin_~person); 6968032#L89 assume !(1 == getOrigin_~person); 6967826#L93 assume !(2 == getOrigin_~person); 6967827#L97 assume !(3 == getOrigin_~person); 6969207#L101 assume !(4 == getOrigin_~person); 6966669#L105 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~1 := 1;getOrigin_#res := getOrigin_~retValue_acc~1; 6966590#L110 bigMacCall_#t~ret16 := getOrigin_#res;bigMacCall_~tmp~8 := bigMacCall_#t~ret16;havoc bigMacCall_#t~ret16;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~8;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6966591#L618 assume 0 == initPersonOnFloor_~floor; 6967982#L619 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6962621#L726-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6965641#L410 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6962372#L422-2 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6962373#L347 assume !(0 == isFloorCalling_~floorID); 6968422#L351 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6968158#L374 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6969560#L3221 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6969561#L2606 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6968576#L1937 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6968577#L2610 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6969679#L2623 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6970323#L2758 assume !(0 != timeShift_~tmp___9~2); 6970322#L2849 assume 1 == ~doorState~0;~doorState~0 := 0; 6970321#L2849-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6970319#L347-3 assume !(0 == isFloorCalling_~floorID); 6970320#L351-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6969635#L374-3 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6969636#L3221-1 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6969626#L2489 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6969627#L1937-1 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6969585#L2502 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6969586#L2857 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6969578#L2546 assume !(1 == ~currentHeading~0); 6967961#L2556 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6967962#L2556-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6969541#L2562-5 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6969542#L347-25 assume !(0 == isFloorCalling_~floorID); 6968556#L351-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6966263#L374-25 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6965895#L3221-3 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6965425#L941 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6962639#L941-1 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6965427#L347-26 assume !(0 == isFloorCalling_~floorID); 6968557#L351-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6967613#L374-26 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6970227#L3221-4 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6970224#L2606-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6970221#L1937-4 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6970217#L2610-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6970218#L2623-1 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6978290#L2758-1 assume !(0 != timeShift_~tmp___9~2); 6978289#L2849-3 assume !(1 == ~doorState~0); 6978288#L2849-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6978286#L347-29 assume !(0 == isFloorCalling_~floorID); 6977699#L351-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6977693#L374-29 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6977691#L3221-5 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6977688#L2489-2 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6977670#L1937-5 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6977457#L2502-2 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6977437#L2857-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6977365#L2546-3 assume !(1 == ~currentHeading~0); 6977358#L2556-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6977309#L2556-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6977300#L2562-11 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6989187#L347-51 assume !(0 == isFloorCalling_~floorID); 6989182#L351-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6989180#L374-51 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6989175#L3221-7 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6989176#L941-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6994801#L941-3 havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6994799#L347-52 assume !(0 == isFloorCalling_~floorID); 6994796#L351-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6994793#L374-52 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6994792#L3221-8 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 6994189#L2606-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6994190#L1937-8 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 6996026#L2610-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 6996028#L2623-2 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 6994028#L2758-2 assume !(0 != timeShift_~tmp___9~2); 6994029#L2849-6 assume !(1 == ~doorState~0); 6994024#L2849-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6994025#L347-55 assume !(0 == isFloorCalling_~floorID); 6994013#L351-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6994008#L374-55 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6994052#L3221-9 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 6997476#L2489-4 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 6997477#L1937-9 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 6999800#L2502-4 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 6994111#L2857-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 6994112#L2546-6 assume !(1 == ~currentHeading~0); 7001866#L2556-18 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6993778#L2556-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6993758#L2562-17 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6993759#L347-77 assume !(0 == isFloorCalling_~floorID); 6993753#L351-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 6993750#L374-77 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 6993749#L3221-11 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 6993744#L941-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 6993741#L941-5 havoc bobCall_#t~ret11, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~1;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~1; 6993742#L85-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~1 := 4;getOrigin_#res := getOrigin_~retValue_acc~1; 7025830#L110-1 bobCall_#t~ret11 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret11;havoc bobCall_#t~ret11;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7025829#L618-1 assume 0 == initPersonOnFloor_~floor; 6993689#L619-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6993688#L726-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6993682#L410-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6993680#L422-5 havoc cleanup_#t~ret17, cleanup_#t~ret18, cleanup_~i~2, cleanup_~tmp~9, cleanup_~tmp___0~3, cleanup_~__cil_tmp4~0;havoc cleanup_~i~2;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~3;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 6985721#L347-78 assume !(0 == isFloorCalling_~floorID); 6985722#L351-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7018745#L374-78 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7018746#L3221-12 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 7018729#L2606-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~21;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7018731#L1937-12 stopRequestedAtCurrentFloor_#t~ret84 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret84;havoc stopRequestedAtCurrentFloor_#t~ret84; 7018715#L2610-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9);stopRequestedAtCurrentFloor_~retValue_acc~25 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 7018717#L2623-3 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 7042100#L2758-3 assume !(0 != timeShift_~tmp___9~2); 7042099#L2849-9 assume !(1 == ~doorState~0); 7029109#L2849-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7029105#L347-81 assume !(0 == isFloorCalling_~floorID); 7029106#L351-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7041871#L374-81 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7041870#L3221-13 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 7031786#L2489-6 assume 0 != stopRequestedInDirection_~tmp___0~7;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7031787#L1937-13 stopRequestedInDirection_#t~ret78 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret78;havoc stopRequestedInDirection_#t~ret78;stopRequestedInDirection_~__cil_tmp7~5 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5 := (if stopRequestedInDirection_~tmp~18 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22 := (if stopRequestedInDirection_~__cil_tmp8~5 == stopRequestedInDirection_~__cil_tmp7~5 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 7032017#L2502-6 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 7032018#L2857-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 7041846#L2546-9 assume !(1 == ~currentHeading~0); 7041843#L2556-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7041839#L2556-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7034592#L2562-23 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7034590#L347-103 assume !(0 == isFloorCalling_~floorID); 7034589#L351-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7034585#L374-103 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7034583#L3221-15 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 7034577#L941-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 7034576#L941-7 cleanup_~i~2 := 0; 7034570#L1129-2 assume !false; 7034571#L1130 [2019-12-07 17:21:35,967 INFO L796 eck$LassoCheckResult]: Loop: 7034571#L1130 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 7148963#L1133 assume cleanup_~i~2 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 7148962#L1808 cleanup_#t~ret17 := isBlocked_#res;cleanup_~tmp___0~3 := cleanup_#t~ret17;havoc cleanup_#t~ret17; 7148282#L1137 assume 1 != cleanup_~tmp___0~3; 7148281#L1137-1 havoc isIdle_#res;havoc isIdle_#t~ret65, isIdle_~retValue_acc~20, isIdle_~tmp~16;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~16;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_#t~ret64, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~15, anyStopRequested_~tmp___0~5, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~15;havoc anyStopRequested_~tmp___0~5;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7148279#L347-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7148280#L374-104 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 7138356#L2045 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 7138349#L2109 isIdle_#t~ret65 := anyStopRequested_#res;isIdle_~tmp~16 := isIdle_#t~ret65;havoc isIdle_#t~ret65;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~16 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 7133069#L2122 cleanup_#t~ret18 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret18;havoc cleanup_#t~ret18; 7133070#L1149 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_~tmp~23, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret83, stopRequestedAtCurrentFloor_#t~ret84, stopRequestedAtCurrentFloor_#t~ret85, stopRequestedAtCurrentFloor_#t~ret86, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7132999#L347-109 assume !(0 == isFloorCalling_~floorID); 7133001#L351-109 assume !(1 == isFloorCalling_~floorID); 7132932#L355-109 assume !(2 == isFloorCalling_~floorID); 7132933#L359-109 assume !(3 == isFloorCalling_~floorID); 7132928#L363-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7132929#L374-109 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7146519#L3221-16 stopRequestedAtCurrentFloor_#t~ret83 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret83;havoc stopRequestedAtCurrentFloor_#t~ret83; 7144700#L2606-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);havoc stopRequestedAtCurrentFloor__wrappee__base_#res;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81, stopRequestedAtCurrentFloor__wrappee__base_#t~ret82, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__base_~tmp~20, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~20;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7144701#L347-111 assume !(0 == isFloorCalling_~floorID); 7143345#L351-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7143327#L374-111 stopRequestedAtCurrentFloor__wrappee__base_#t~ret81 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret81;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret81; 7143284#L2579-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 7142941#L1954-9 assume !(0 == buttonForFloorIsPressed_~floorID); 7142942#L1958-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 7143054#L1975-9 stopRequestedAtCurrentFloor__wrappee__base_#t~ret82 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__base_~tmp~20 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret82;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret82; 7143052#L2586-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp~20);stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24 := 0;stopRequestedAtCurrentFloor__wrappee__base_#res := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~24; 7143051#L2591-9 stopRequestedAtCurrentFloor_#t~ret86 := stopRequestedAtCurrentFloor__wrappee__base_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret86;havoc stopRequestedAtCurrentFloor_#t~ret86;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 7143050#L2623-4 timeShift_#t~ret99 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99; 7143048#L2758-4 assume !(0 != timeShift_~tmp___9~2); 7143047#L2849-12 assume 1 == ~doorState~0;~doorState~0 := 0; 7143046#L2849-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~__cil_tmp7~5, stopRequestedInDirection_~__cil_tmp8~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~__cil_tmp7~5;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7143045#L347-112 assume !(0 == isFloorCalling_~floorID); 7143044#L351-112 assume !(1 == isFloorCalling_~floorID); 7143043#L355-112 assume !(2 == isFloorCalling_~floorID); 7143042#L359-112 assume !(3 == isFloorCalling_~floorID); 7143041#L363-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7143040#L374-112 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7143038#L3221-17 stopRequestedInDirection_#t~ret77 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~7 := stopRequestedInDirection_#t~ret77;havoc stopRequestedInDirection_#t~ret77; 7143032#L2489-8 assume !(0 != stopRequestedInDirection_~tmp___0~7);stopRequestedInDirection__wrappee__base_#in~dir, stopRequestedInDirection__wrappee__base_#in~respectFloorCalls, stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_#res;havoc stopRequestedInDirection__wrappee__base_#t~ret66, stopRequestedInDirection__wrappee__base_#t~ret67, stopRequestedInDirection__wrappee__base_#t~ret68, stopRequestedInDirection__wrappee__base_#t~ret69, stopRequestedInDirection__wrappee__base_#t~ret70, stopRequestedInDirection__wrappee__base_#t~ret71, stopRequestedInDirection__wrappee__base_#t~ret72, stopRequestedInDirection__wrappee__base_#t~ret73, stopRequestedInDirection__wrappee__base_#t~ret74, stopRequestedInDirection__wrappee__base_#t~ret75, stopRequestedInDirection__wrappee__base_#t~ret76, stopRequestedInDirection__wrappee__base_~dir, stopRequestedInDirection__wrappee__base_~respectFloorCalls, stopRequestedInDirection__wrappee__base_~respectInLiftCalls, stopRequestedInDirection__wrappee__base_~retValue_acc~21, stopRequestedInDirection__wrappee__base_~tmp~17, stopRequestedInDirection__wrappee__base_~tmp___0~6, stopRequestedInDirection__wrappee__base_~tmp___1~5, stopRequestedInDirection__wrappee__base_~tmp___2~3, stopRequestedInDirection__wrappee__base_~tmp___3~1, stopRequestedInDirection__wrappee__base_~tmp___4~0, stopRequestedInDirection__wrappee__base_~tmp___5~0, stopRequestedInDirection__wrappee__base_~tmp___6~0, stopRequestedInDirection__wrappee__base_~tmp___7~0, stopRequestedInDirection__wrappee__base_~tmp___8~0, stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~dir := stopRequestedInDirection__wrappee__base_#in~dir;stopRequestedInDirection__wrappee__base_~respectFloorCalls := stopRequestedInDirection__wrappee__base_#in~respectFloorCalls;stopRequestedInDirection__wrappee__base_~respectInLiftCalls := stopRequestedInDirection__wrappee__base_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__base_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__base_~tmp~17;havoc stopRequestedInDirection__wrappee__base_~tmp___0~6;havoc stopRequestedInDirection__wrappee__base_~tmp___1~5;havoc stopRequestedInDirection__wrappee__base_~tmp___2~3;havoc stopRequestedInDirection__wrappee__base_~tmp___3~1;havoc stopRequestedInDirection__wrappee__base_~tmp___4~0;havoc stopRequestedInDirection__wrappee__base_~tmp___5~0;havoc stopRequestedInDirection__wrappee__base_~tmp___6~0;havoc stopRequestedInDirection__wrappee__base_~tmp___7~0;havoc stopRequestedInDirection__wrappee__base_~tmp___8~0;havoc stopRequestedInDirection__wrappee__base_~tmp___9~0; 7143030#L2141-8 assume !(1 == stopRequestedInDirection__wrappee__base_~dir); 7143031#L2310-8 assume !(0 == ~currentFloorID~0); 7143090#L2316-8 assume ~currentFloorID~0 > 0; 7143088#L2317-8 assume 0 != stopRequestedInDirection__wrappee__base_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7122558#L347-118 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7143020#L374-118 stopRequestedInDirection__wrappee__base_#t~ret72 := isFloorCalling_#res;stopRequestedInDirection__wrappee__base_~tmp___9~0 := stopRequestedInDirection__wrappee__base_#t~ret72;havoc stopRequestedInDirection__wrappee__base_#t~ret72; 7142953#L2321-8 assume 0 != stopRequestedInDirection__wrappee__base_~tmp___9~0;stopRequestedInDirection__wrappee__base_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__base_#res := stopRequestedInDirection__wrappee__base_~retValue_acc~21; 7142944#L2463-8 stopRequestedInDirection_#t~ret79 := stopRequestedInDirection__wrappee__base_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret79;havoc stopRequestedInDirection_#t~ret79;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 7142830#L2502-8 timeShift_#t~ret106 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret106;havoc timeShift_#t~ret106; 7142831#L2857-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret80, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 7149532#L2546-12 assume !(1 == ~currentHeading~0); 7149292#L2556-36 assume !(0 == ~currentFloorID~0); 7147220#L2556-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7146546#L2562-29 havoc __utac_acc__Specification14_spec__1_#t~ret6, __utac_acc__Specification14_spec__1_#t~ret7, __utac_acc__Specification14_spec__1_#t~ret8, __utac_acc__Specification14_spec__1_#t~ret9, __utac_acc__Specification14_spec__1_~tmp~2, __utac_acc__Specification14_spec__1_~tmp___0~2, __utac_acc__Specification14_spec__1_~tmp___1~2, __utac_acc__Specification14_spec__1_~tmp___2~0;havoc __utac_acc__Specification14_spec__1_~tmp~2;havoc __utac_acc__Specification14_spec__1_~tmp___0~2;havoc __utac_acc__Specification14_spec__1_~tmp___1~2;havoc __utac_acc__Specification14_spec__1_~tmp___2~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret157, isExecutiveFloorCalling_~retValue_acc~28;havoc isExecutiveFloorCalling_~retValue_acc~28;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 7146543#L347-134 assume !(0 == isFloorCalling_~floorID); 7145489#L351-134 assume !(1 == isFloorCalling_~floorID); 7145490#L355-134 assume !(2 == isFloorCalling_~floorID); 7145492#L359-134 assume !(3 == isFloorCalling_~floorID); 7145487#L363-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~3 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 7145488#L374-134 isExecutiveFloorCalling_#t~ret157 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~28 := isExecutiveFloorCalling_#t~ret157;havoc isExecutiveFloorCalling_#t~ret157;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~28; 7148970#L3221-19 __utac_acc__Specification14_spec__1_#t~ret6 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~0 := __utac_acc__Specification14_spec__1_#t~ret6;havoc __utac_acc__Specification14_spec__1_#t~ret6; 7148966#L941-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~0); 7148964#L941-9 cleanup_~i~2 := 1 + cleanup_~i~2; 7126242#L1129-2 assume !false; 7034571#L1130 [2019-12-07 17:21:35,968 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:35,968 INFO L82 PathProgramCache]: Analyzing trace with hash 1592395680, now seen corresponding path program 6 times [2019-12-07 17:21:35,968 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:35,968 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [231797896] [2019-12-07 17:21:35,968 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:35,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:36,017 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:36,017 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [231797896] [2019-12-07 17:21:36,017 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 17:21:36,017 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 17:21:36,017 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [297784271] [2019-12-07 17:21:36,018 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 17:21:36,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:36,018 INFO L82 PathProgramCache]: Analyzing trace with hash 1762555511, now seen corresponding path program 1 times [2019-12-07 17:21:36,018 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 17:21:36,018 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [568052778] [2019-12-07 17:21:36,018 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 17:21:36,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 17:21:36,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 17:21:36,050 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-12-07 17:21:36,691 WARN L192 SmtUtils]: Spent 637.00 ms on a formula simplification. DAG size of input: 243 DAG size of output: 198 [2019-12-07 17:21:37,151 WARN L192 SmtUtils]: Spent 452.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 148 [2019-12-07 17:21:37,153 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 17:21:37,153 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 17:21:37,153 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 17:21:37,153 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 17:21:37,153 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-12-07 17:21:37,153 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:37,153 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 17:21:37,154 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 17:21:37,154 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration18_Loop [2019-12-07 17:21:37,154 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 17:21:37,154 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 17:21:37,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,168 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,207 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,212 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,217 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,218 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,231 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,239 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,240 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,241 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,250 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,266 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,290 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,302 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,305 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:37,794 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 17:21:37,794 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:37,796 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 17:21:37,797 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:37,802 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-12-07 17:21:37,802 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 17:21:38,363 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-12-07 17:21:38,364 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 17:21:38,364 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 17:21:38,364 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 17:21:38,364 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 17:21:38,364 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-12-07 17:21:38,364 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:38,364 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 17:21:38,364 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 17:21:38,364 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product03.cil.c_Iteration18_Loop [2019-12-07 17:21:38,365 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 17:21:38,365 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 17:21:38,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,371 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,373 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,374 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,376 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,379 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,386 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,387 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,388 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,404 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,405 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,413 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,415 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,417 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,418 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,433 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,434 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,439 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,440 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,441 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,445 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,447 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,449 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,451 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,452 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,454 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,455 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,456 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,457 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,458 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,462 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,469 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,472 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,473 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,476 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,477 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,478 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,481 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,481 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,492 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,493 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,494 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,502 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,505 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,511 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,518 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,527 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,532 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,533 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:38,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 17:21:39,043 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 17:21:39,043 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,046 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,047 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,047 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,047 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,047 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,047 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,048 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,048 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,049 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,052 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,053 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,053 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,053 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,053 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,053 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,054 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,054 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,055 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,179 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,180 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,180 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,180 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,180 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,180 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,181 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,181 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,182 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,186 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,188 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,188 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,188 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,188 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,188 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,188 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,188 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,189 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,193 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,194 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,194 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,194 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,194 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,194 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,195 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,195 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,196 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,200 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,201 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,201 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,201 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,201 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,201 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,201 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,201 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,202 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,206 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,207 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,207 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,207 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,207 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,207 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,208 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,208 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,209 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,212 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,213 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,214 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,214 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,214 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,214 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,214 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,214 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,215 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,219 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,220 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,220 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,220 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,220 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,220 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,221 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,221 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,222 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,226 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,227 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,227 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,227 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,227 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,227 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,228 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,228 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,229 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,233 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 17:21:39,234 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 17:21:39,234 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 17:21:39,234 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 17:21:39,234 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 17:21:39,234 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 17:21:39,235 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 17:21:39,235 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 17:21:39,237 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-12-07 17:21:39,242 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2019-12-07 17:21:39,242 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b4fa1d39-6b89-4b87-acea-17fc16674d01/bin/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 17:21:39,244 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-12-07 17:21:39,244 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-12-07 17:21:39,244 INFO L510 LassoAnalysis]: Proved termination. [2019-12-07 17:21:39,244 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2019-12-07 17:21:39,246 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-12-07 17:21:39,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 17:21:39,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:39,368 INFO L264 TraceCheckSpWp]: Trace formula consists of 1016 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 17:21:39,371 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 17:21:39,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 17:21:39,405 INFO L264 TraceCheckSpWp]: Trace formula consists of 214 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 17:21:39,406 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 17:21:39,430 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 17:21:39,431 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 4 loop predicates [2019-12-07 17:21:39,431 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 246994 states and 438350 transitions. cyclomatic complexity: 191455 Second operand 5 states. [2019-12-07 17:21:40,661 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 246994 states and 438350 transitions. cyclomatic complexity: 191455. Second operand 5 states. Result 397228 states and 704823 transitions. Complement of second has 8 states. [2019-12-07 17:21:40,661 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-12-07 17:21:40,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-12-07 17:21:40,669 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 9146 transitions. [2019-12-07 17:21:40,669 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9146 transitions. Stem has 142 letters. Loop has 64 letters. [2019-12-07 17:21:40,670 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 17:21:40,670 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9146 transitions. Stem has 206 letters. Loop has 64 letters. [2019-12-07 17:21:40,671 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 17:21:40,671 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9146 transitions. Stem has 142 letters. Loop has 128 letters. [2019-12-07 17:21:40,672 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 17:21:40,672 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 397228 states and 704823 transitions. [2019-12-07 17:21:42,334 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 17:21:42,334 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 397228 states to 0 states and 0 transitions. [2019-12-07 17:21:42,334 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 17:21:42,334 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 17:21:42,335 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 17:21:42,335 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 17:21:42,335 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 17:21:42,335 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 17:21:42,335 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 17:21:42,335 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 17:21:42,335 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 17:21:42,335 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 6 states. [2019-12-07 17:21:42,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 17:21:42,335 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-12-07 17:21:42,335 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 17:21:42,335 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-12-07 17:21:42,336 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 17:21:42,336 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 17:21:42,336 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 17:21:42,336 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 17:21:42,336 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 17:21:42,336 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 17:21:42,336 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 17:21:42,336 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 17:21:42,336 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 17:21:42,336 INFO L424 BuchiCegarLoop]: ======== Iteration 19============ [2019-12-07 17:21:42,336 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-12-07 17:21:42,336 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 17:21:42,336 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-12-07 17:21:42,342 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 07.12 05:21:42 BoogieIcfgContainer [2019-12-07 17:21:42,342 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-12-07 17:21:42,342 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 17:21:42,342 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 17:21:42,342 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 17:21:42,343 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 05:18:13" (3/4) ... [2019-12-07 17:21:42,345 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-12-07 17:21:42,346 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 17:21:42,347 INFO L168 Benchmark]: Toolchain (without parser) took 215238.36 ms. Allocated memory was 1.0 GB in the beginning and 7.3 GB in the end (delta: 6.2 GB). Free memory was 938.0 MB in the beginning and 4.5 GB in the end (delta: -3.6 GB). Peak memory consumption was 2.6 GB. Max. memory is 11.5 GB. [2019-12-07 17:21:42,347 INFO L168 Benchmark]: CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 17:21:42,347 INFO L168 Benchmark]: CACSL2BoogieTranslator took 489.04 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 113.2 MB). Free memory was 938.0 MB in the beginning and 1.1 GB in the end (delta: -134.6 MB). Peak memory consumption was 29.7 MB. Max. memory is 11.5 GB. [2019-12-07 17:21:42,347 INFO L168 Benchmark]: Boogie Procedure Inliner took 146.66 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 54.8 MB). Peak memory consumption was 54.8 MB. Max. memory is 11.5 GB. [2019-12-07 17:21:42,348 INFO L168 Benchmark]: Boogie Preprocessor took 184.64 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 969.5 MB in the end (delta: 48.4 MB). Peak memory consumption was 48.4 MB. Max. memory is 11.5 GB. [2019-12-07 17:21:42,348 INFO L168 Benchmark]: RCFGBuilder took 5559.49 ms. Allocated memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: 321.4 MB). Free memory was 969.5 MB in the beginning and 1.0 GB in the end (delta: -32.8 MB). Peak memory consumption was 311.8 MB. Max. memory is 11.5 GB. [2019-12-07 17:21:42,348 INFO L168 Benchmark]: BuchiAutomizer took 208851.70 ms. Allocated memory was 1.5 GB in the beginning and 7.3 GB in the end (delta: 5.8 GB). Free memory was 1.0 GB in the beginning and 4.5 GB in the end (delta: -3.5 GB). Peak memory consumption was 2.3 GB. Max. memory is 11.5 GB. [2019-12-07 17:21:42,349 INFO L168 Benchmark]: Witness Printer took 3.53 ms. Allocated memory is still 7.3 GB. Free memory is still 4.5 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 17:21:42,351 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 489.04 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 113.2 MB). Free memory was 938.0 MB in the beginning and 1.1 GB in the end (delta: -134.6 MB). Peak memory consumption was 29.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 146.66 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 54.8 MB). Peak memory consumption was 54.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 184.64 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 969.5 MB in the end (delta: 48.4 MB). Peak memory consumption was 48.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5559.49 ms. Allocated memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: 321.4 MB). Free memory was 969.5 MB in the beginning and 1.0 GB in the end (delta: -32.8 MB). Peak memory consumption was 311.8 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 208851.70 ms. Allocated memory was 1.5 GB in the beginning and 7.3 GB in the end (delta: 5.8 GB). Free memory was 1.0 GB in the beginning and 4.5 GB in the end (delta: -3.5 GB). Peak memory consumption was 2.3 GB. Max. memory is 11.5 GB. * Witness Printer took 3.53 ms. Allocated memory is still 7.3 GB. Free memory is still 4.5 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 20 terminating modules (18 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function currentFloorID and consists of 14 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 18 modules have a trivial ranking function, the largest among these consists of 9 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 208.8s and 19 iterations. TraceHistogramMax:1. Analysis of lassos took 14.6s. Construction of modules took 66.0s. Büchi inclusion checks took 45.8s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 14. Automata minimization 36.8s AutomataMinimizationTime, 18 MinimizatonAttempts, 3220748 StatesRemovedByMinimization, 18 NontrivialMinimizations. Non-live state removal took 38.3s Buchi closure took 2.1s. Biggest automaton had 246994 states and ocurred in iteration 17. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 382278 SDtfs, 1132983 SDslu, 1206357 SDs, 0 SdLazy, 87063 SolverSat, 10035 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 66.0s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI16 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf1054 smp54 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 8ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 8 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 7.5s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...