./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7081c0762c221e2c23313e8cd77b3fddf82a21d6 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 10:07:50,863 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 10:07:50,864 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 10:07:50,872 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 10:07:50,872 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 10:07:50,873 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 10:07:50,874 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 10:07:50,875 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 10:07:50,877 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 10:07:50,877 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 10:07:50,878 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 10:07:50,879 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 10:07:50,879 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 10:07:50,879 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 10:07:50,880 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 10:07:50,881 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 10:07:50,881 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 10:07:50,882 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 10:07:50,883 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 10:07:50,885 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 10:07:50,886 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 10:07:50,886 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 10:07:50,887 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 10:07:50,887 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 10:07:50,889 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 10:07:50,889 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 10:07:50,889 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 10:07:50,890 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 10:07:50,890 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 10:07:50,891 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 10:07:50,891 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 10:07:50,891 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 10:07:50,892 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 10:07:50,892 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 10:07:50,893 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 10:07:50,893 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 10:07:50,893 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 10:07:50,893 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 10:07:50,893 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 10:07:50,894 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 10:07:50,894 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 10:07:50,895 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-12-07 10:07:50,906 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 10:07:50,906 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 10:07:50,907 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-12-07 10:07:50,907 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-12-07 10:07:50,907 INFO L138 SettingsManager]: * Use SBE=true [2019-12-07 10:07:50,907 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-12-07 10:07:50,907 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-12-07 10:07:50,907 INFO L138 SettingsManager]: * Use old map elimination=false [2019-12-07 10:07:50,907 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-12-07 10:07:50,908 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-12-07 10:07:50,908 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-12-07 10:07:50,908 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 10:07:50,908 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 10:07:50,908 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-12-07 10:07:50,908 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 10:07:50,908 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 10:07:50,908 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 10:07:50,909 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-12-07 10:07:50,910 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 10:07:50,910 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 10:07:50,910 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-12-07 10:07:50,910 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 10:07:50,910 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-12-07 10:07:50,910 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 10:07:50,910 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-12-07 10:07:50,911 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-12-07 10:07:50,911 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7081c0762c221e2c23313e8cd77b3fddf82a21d6 [2019-12-07 10:07:51,011 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 10:07:51,021 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 10:07:51,024 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 10:07:51,025 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 10:07:51,026 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 10:07:51,026 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2019-12-07 10:07:51,069 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/data/91d1b59f8/d1b75585589b4027b13164ee70e285ca/FLAGf5f874c96 [2019-12-07 10:07:51,463 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 10:07:51,464 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/sv-benchmarks/c/product-lines/elevator_spec14_product19.cil.c [2019-12-07 10:07:51,476 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/data/91d1b59f8/d1b75585589b4027b13164ee70e285ca/FLAGf5f874c96 [2019-12-07 10:07:51,486 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/data/91d1b59f8/d1b75585589b4027b13164ee70e285ca [2019-12-07 10:07:51,487 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 10:07:51,488 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 10:07:51,489 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 10:07:51,489 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 10:07:51,491 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 10:07:51,492 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 10:07:51" (1/1) ... [2019-12-07 10:07:51,494 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1c69a469 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:51, skipping insertion in model container [2019-12-07 10:07:51,494 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 10:07:51" (1/1) ... [2019-12-07 10:07:51,499 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 10:07:51,540 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 10:07:51,902 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 10:07:51,914 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 10:07:51,993 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 10:07:52,036 INFO L208 MainTranslator]: Completed translation [2019-12-07 10:07:52,037 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52 WrapperNode [2019-12-07 10:07:52,037 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 10:07:52,037 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 10:07:52,037 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 10:07:52,038 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 10:07:52,043 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,073 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,226 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 10:07:52,226 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 10:07:52,226 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 10:07:52,226 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 10:07:52,233 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,233 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,256 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,256 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,321 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,384 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,409 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... [2019-12-07 10:07:52,450 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 10:07:52,451 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 10:07:52,451 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 10:07:52,451 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 10:07:52,452 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:07:52,504 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 10:07:52,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-12-07 10:07:52,504 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 10:07:52,504 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 10:07:58,235 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 10:07:58,235 INFO L287 CfgBuilder]: Removed 1383 assume(true) statements. [2019-12-07 10:07:58,238 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 10:07:58 BoogieIcfgContainer [2019-12-07 10:07:58,238 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 10:07:58,239 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-12-07 10:07:58,239 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-12-07 10:07:58,241 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-12-07 10:07:58,242 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 10:07:58,242 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 07.12 10:07:51" (1/3) ... [2019-12-07 10:07:58,243 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@52eef177 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 10:07:58, skipping insertion in model container [2019-12-07 10:07:58,243 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 10:07:58,243 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 10:07:52" (2/3) ... [2019-12-07 10:07:58,243 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@52eef177 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 10:07:58, skipping insertion in model container [2019-12-07 10:07:58,243 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 10:07:58,243 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 10:07:58" (3/3) ... [2019-12-07 10:07:58,244 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec14_product19.cil.c [2019-12-07 10:07:58,272 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-12-07 10:07:58,273 INFO L357 BuchiCegarLoop]: Hoare is false [2019-12-07 10:07:58,273 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-12-07 10:07:58,273 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 10:07:58,273 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 10:07:58,273 INFO L361 BuchiCegarLoop]: Difference is false [2019-12-07 10:07:58,273 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 10:07:58,273 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-12-07 10:07:58,337 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5902 states. [2019-12-07 10:07:58,428 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1198 [2019-12-07 10:07:58,428 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:07:58,428 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:07:58,442 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:07:58,442 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:07:58,443 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-12-07 10:07:58,443 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5902 states. [2019-12-07 10:07:58,487 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1198 [2019-12-07 10:07:58,487 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:07:58,487 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:07:58,491 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:07:58,491 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:07:58,498 INFO L794 eck$LassoCheckResult]: Stem: 3636#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4870#L-1true havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 5872#L2122true havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 5318#L2130true main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 1941#L2596true assume 0 != main_~tmp~26; 3818#L2573true havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 454#L2178true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4760#L2203true bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2369#L2963true assume 0 == initPersonOnFloor_~floor; 2536#L2964true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1254#L3071-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3504#L2755true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3893#L2767-2true havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1511#L2692true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1252#L2719true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5#L1568true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 97#L952true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3790#L283true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1169#L956true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4971#L969true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1449#L1105true assume !(0 != timeShift_~tmp___9~2); 2918#L1196true assume !(1 == ~doorState~0); 2925#L1196-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1515#L2692-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1240#L2719-3true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7#L1568-1true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1725#L835true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3788#L283-1true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2759#L848true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2096#L1204true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5636#L892true assume !(1 == ~currentHeading~0); 3688#L902true assume !(0 == ~currentFloorID~0); 3674#L902-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3377#L908-5true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3011#L2692-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1194#L2719-25true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 122#L1568-3true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5472#L1687true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5476#L1687-1true havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3021#L2692-26true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1195#L2719-26true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 124#L1568-4true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 100#L952-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3808#L283-4true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1170#L956-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4973#L969-1true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1455#L1105-1true assume !(0 != timeShift_~tmp___9~2); 2880#L1196-3true assume !(1 == ~doorState~0); 2891#L1196-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2983#L2692-29true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1183#L2719-29true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 126#L1568-5true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1731#L835-2true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3806#L283-5true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2740#L848-2true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2099#L1204-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5618#L892-3true assume !(1 == ~currentHeading~0); 3666#L902-9true assume !(0 == ~currentFloorID~0); 3670#L902-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3368#L908-11true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2895#L2692-51true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1058#L2719-51true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113#L1568-7true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5477#L1687-2true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5447#L1687-3true havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2904#L2692-52true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1055#L2719-52true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 115#L1568-8true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 102#L952-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3765#L283-8true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1172#L956-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4975#L969-2true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1457#L1105-2true assume !(0 != timeShift_~tmp___9~2); 2897#L1196-6true assume !(1 == ~doorState~0); 2852#L1196-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2859#L2692-55true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1045#L2719-55true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 116#L1568-9true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1738#L835-4true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3763#L283-9true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2744#L848-4true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2104#L1204-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5625#L892-6true assume !(1 == ~currentHeading~0); 3634#L902-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3638#L902-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3358#L908-17true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3128#L2692-77true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1138#L2719-77true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118#L1568-11true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5449#L1687-4true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5454#L1687-5true havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 463#L2178-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4762#L2203-1true bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2379#L2963-1true assume 0 == initPersonOnFloor_~floor; 2539#L2964-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1262#L3071-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3511#L2755-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3899#L2767-5true havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3134#L2692-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1139#L2719-78true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105#L1568-12true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 104#L952-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3753#L283-12true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1164#L956-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4976#L969-3true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1434#L1105-3true assume !(0 != timeShift_~tmp___9~2); 2854#L1196-9true assume !(1 == ~doorState~0); 2863#L1196-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3096#L2692-81true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1131#L2719-81true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 107#L1568-13true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1713#L835-6true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3784#L283-13true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2751#L848-6true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2106#L1204-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5399#L892-9true assume !(1 == ~currentHeading~0); 3631#L902-27true assume !(0 == ~currentFloorID~0); 3608#L902-29true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3343#L908-23true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2727#L2692-103true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1097#L2719-103true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 110#L1568-15true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5456#L1687-6true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5462#L1687-7true cleanup_~i~3 := 0; 3392#L2405-2true [2019-12-07 10:07:58,500 INFO L796 eck$LassoCheckResult]: Loop: 3392#L2405-2true assume !false; 3353#L2406true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4332#L2409true assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 1768#L130true cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 3992#L2413true assume 1 != cleanup_~tmp___0~11; 3995#L2413-1true havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2732#L2692-104true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1096#L2719-104true anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 3924#L391true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 5213#L455true isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3346#L468true cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1638#L2425true assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2712#L2692-109true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1090#L2719-109true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 111#L1568-16true stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 94#L952-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3773#L283-16true stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1165#L956-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4977#L969-4true timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1435#L1105-4true assume !(0 != timeShift_~tmp___9~2); 2876#L1196-12true assume !(1 == ~doorState~0); 3206#L1196-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2693#L2692-112true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1093#L2719-112true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 112#L1568-17true stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1719#L835-8true assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3771#L283-17true stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2429#L848-8true timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2111#L1204-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5407#L892-12true assume !(1 == ~currentHeading~0); 3601#L902-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3603#L902-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4502#L908-29true havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2602#L2692-134true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 973#L2719-134true isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 98#L1568-19true __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5463#L1687-8true assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5437#L1687-9true cleanup_~i~3 := 1 + cleanup_~i~3; 3392#L2405-2true [2019-12-07 10:07:58,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:07:58,505 INFO L82 PathProgramCache]: Analyzing trace with hash -1508658665, now seen corresponding path program 1 times [2019-12-07 10:07:58,511 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:07:58,512 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1515625031] [2019-12-07 10:07:58,512 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:07:58,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:07:58,803 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:07:58,804 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1515625031] [2019-12-07 10:07:58,804 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:07:58,805 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:07:58,805 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1122169962] [2019-12-07 10:07:58,810 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:07:58,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:07:58,811 INFO L82 PathProgramCache]: Analyzing trace with hash -67339848, now seen corresponding path program 1 times [2019-12-07 10:07:58,811 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:07:58,812 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1261447347] [2019-12-07 10:07:58,812 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:07:58,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:07:58,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:07:58,871 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1261447347] [2019-12-07 10:07:58,871 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:07:58,871 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 10:07:58,872 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683258480] [2019-12-07 10:07:58,873 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:07:58,873 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:07:58,883 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 10:07:58,884 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-12-07 10:07:58,885 INFO L87 Difference]: Start difference. First operand 5902 states. Second operand 7 states. [2019-12-07 10:08:06,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:08:06,297 INFO L93 Difference]: Finished difference Result 50547 states and 94831 transitions. [2019-12-07 10:08:06,298 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2019-12-07 10:08:06,299 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50547 states and 94831 transitions. [2019-12-07 10:08:06,535 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 11021 [2019-12-07 10:08:06,783 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50547 states to 50475 states and 94747 transitions. [2019-12-07 10:08:06,784 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50475 [2019-12-07 10:08:06,832 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50475 [2019-12-07 10:08:06,833 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50475 states and 94747 transitions. [2019-12-07 10:08:06,884 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 10:08:06,884 INFO L688 BuchiCegarLoop]: Abstraction has 50475 states and 94747 transitions. [2019-12-07 10:08:06,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50475 states and 94747 transitions. [2019-12-07 10:08:07,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50475 to 17099. [2019-12-07 10:08:07,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17099 states. [2019-12-07 10:08:07,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17099 states to 17099 states and 32080 transitions. [2019-12-07 10:08:07,402 INFO L711 BuchiCegarLoop]: Abstraction has 17099 states and 32080 transitions. [2019-12-07 10:08:07,402 INFO L591 BuchiCegarLoop]: Abstraction has 17099 states and 32080 transitions. [2019-12-07 10:08:07,402 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-12-07 10:08:07,402 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17099 states and 32080 transitions. [2019-12-07 10:08:07,434 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3495 [2019-12-07 10:08:07,434 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:08:07,434 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:08:07,437 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:07,437 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:07,437 INFO L794 eck$LassoCheckResult]: Stem: 60972#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 60973#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 62072#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 62379#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 59214#L2596 assume 0 != main_~tmp~26; 59215#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 57341#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 56685#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 59709#L2963 assume 0 == initPersonOnFloor_~floor; 59711#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 56992#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 58366#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 60654#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58628#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58364#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56499#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 56500#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 56743#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 58273#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58275#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 68042#L1105 assume !(0 != timeShift_~tmp___9~2); 68043#L1196 assume !(1 == ~doorState~0); 73146#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73145#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73144#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73143#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 73141#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 73142#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 73150#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 73148#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 73147#L892 assume !(1 == ~currentHeading~0); 61023#L902 assume !(0 == ~currentFloorID~0); 61010#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 58027#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60276#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58303#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56802#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 56803#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 63288#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 63287#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62756#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 63145#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 63028#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 63026#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 63025#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58277#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 69059#L1105-1 assume !(0 != timeShift_~tmp___9~2); 69060#L1196-3 assume !(1 == ~doorState~0); 73471#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73470#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73469#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73468#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 58974#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 58975#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 73467#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 73465#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 73466#L892-3 assume !(1 == ~currentHeading~0); 61003#L902-9 assume !(0 == ~currentFloorID~0); 61004#L902-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58017#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60214#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 60215#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 68062#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 68057#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 64045#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 64038#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62732#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 64021#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 62805#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62794#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 62783#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58279#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 72914#L1105-2 assume !(0 != timeShift_~tmp___9~2); 72915#L1196-6 assume !(1 == ~doorState~0); 73358#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73357#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73356#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73355#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 58984#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 58985#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 60089#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 59415#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 59417#L892-6 assume !(1 == ~currentHeading~0); 60969#L902-18 assume !(0 == ~currentFloorID~0); 60970#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57988#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 68114#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62704#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 68113#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 68108#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 68106#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 68104#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 68099#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 68097#L2963-1 assume 0 == initPersonOnFloor_~floor; 68073#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 68068#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 68067#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 63290#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 63289#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 62706#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 63146#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 63034#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 63033#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 63032#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58270#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 71283#L1105-3 assume !(0 != timeShift_~tmp___9~2); 71284#L1196-9 assume !(1 == ~doorState~0); 73233#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73232#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73231#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73230#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 73228#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 61120#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 60096#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 59419#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 59421#L892-9 assume !(1 == ~currentHeading~0); 60966#L902-27 assume !(0 == ~currentFloorID~0); 60943#L902-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 57979#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60074#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58182#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56776#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 56777#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 60809#L1687-7 cleanup_~i~3 := 0; 60680#L2405-2 [2019-12-07 10:08:07,438 INFO L796 eck$LassoCheckResult]: Loop: 60680#L2405-2 assume !false; 60608#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 60609#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 59023#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 59024#L2413 assume 1 != cleanup_~tmp___0~11; 61312#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 60078#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58180#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 58181#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 56694#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 60598#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 58826#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 58827#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58174#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56778#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 56779#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 62778#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 62728#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58272#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 72247#L1105-4 assume !(0 != timeShift_~tmp___9~2); 72248#L1196-12 assume !(1 == ~doorState~0); 73427#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 73426#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 73425#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 73424#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 73422#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 61107#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 59773#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 59426#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 59428#L892-12 assume !(1 == ~currentHeading~0); 60936#L902-36 assume !(0 == ~currentFloorID~0); 60937#L902-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 58001#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 59959#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 58005#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 56745#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 56746#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 60818#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 60680#L2405-2 [2019-12-07 10:08:07,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:07,438 INFO L82 PathProgramCache]: Analyzing trace with hash -1085011943, now seen corresponding path program 1 times [2019-12-07 10:08:07,438 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:07,438 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [898199746] [2019-12-07 10:08:07,438 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:07,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:07,517 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:07,517 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [898199746] [2019-12-07 10:08:07,517 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:08:07,518 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:08:07,518 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [322396225] [2019-12-07 10:08:07,518 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:08:07,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:07,519 INFO L82 PathProgramCache]: Analyzing trace with hash -876686474, now seen corresponding path program 1 times [2019-12-07 10:08:07,519 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:07,519 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837536653] [2019-12-07 10:08:07,519 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:07,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:07,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:07,541 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837536653] [2019-12-07 10:08:07,541 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:08:07,541 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:08:07,541 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2052335856] [2019-12-07 10:08:07,542 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:08:07,542 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:08:07,542 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 10:08:07,542 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 10:08:07,543 INFO L87 Difference]: Start difference. First operand 17099 states and 32080 transitions. cyclomatic complexity: 14983 Second operand 3 states. [2019-12-07 10:08:07,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:08:07,880 INFO L93 Difference]: Finished difference Result 30708 states and 57570 transitions. [2019-12-07 10:08:07,881 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 10:08:07,881 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30708 states and 57570 transitions. [2019-12-07 10:08:07,974 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6962 [2019-12-07 10:08:08,093 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30708 states to 30708 states and 57570 transitions. [2019-12-07 10:08:08,093 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30708 [2019-12-07 10:08:08,113 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30708 [2019-12-07 10:08:08,113 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30708 states and 57570 transitions. [2019-12-07 10:08:08,131 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 10:08:08,131 INFO L688 BuchiCegarLoop]: Abstraction has 30708 states and 57570 transitions. [2019-12-07 10:08:08,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30708 states and 57570 transitions. [2019-12-07 10:08:08,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30708 to 30676. [2019-12-07 10:08:08,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 30676 states. [2019-12-07 10:08:08,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30676 states to 30676 states and 57522 transitions. [2019-12-07 10:08:08,392 INFO L711 BuchiCegarLoop]: Abstraction has 30676 states and 57522 transitions. [2019-12-07 10:08:08,392 INFO L591 BuchiCegarLoop]: Abstraction has 30676 states and 57522 transitions. [2019-12-07 10:08:08,392 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-12-07 10:08:08,392 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30676 states and 57522 transitions. [2019-12-07 10:08:08,456 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 6954 [2019-12-07 10:08:08,456 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:08:08,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:08:08,459 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:08,459 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:08,460 INFO L794 eck$LassoCheckResult]: Stem: 108799#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 108800#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 109926#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 110231#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 107021#L2596 assume 0 != main_~tmp~26; 107022#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 105156#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 104499#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 107512#L2963 assume 0 == initPersonOnFloor_~floor; 107514#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 104806#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 106184#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 108479#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 106442#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106182#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104313#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 104314#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 104557#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 106098#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106100#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 106328#L1105 assume !(0 != timeShift_~tmp___9~2); 106330#L1196 assume !(1 == ~doorState~0); 108050#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 106447#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106167#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104318#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 104319#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106783#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 108946#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 111785#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 111577#L892 assume !(1 == ~currentHeading~0); 108851#L902 assume !(0 == ~currentFloorID~0); 108838#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108475#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108103#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106125#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104615#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 104616#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 108653#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108108#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 106126#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104620#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 104564#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 104566#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 108963#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 113774#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 113771#L1105-1 assume !(0 != timeShift_~tmp___9~2); 113768#L1196-3 assume !(1 == ~doorState~0); 113748#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 113747#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 113746#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113745#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 113743#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 108961#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 107908#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 107211#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 107213#L892-3 assume !(1 == ~currentHeading~0); 108831#L902-9 assume !(0 == ~currentFloorID~0); 108832#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108816#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 117659#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110661#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 117651#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 113932#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 113927#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 113924#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110656#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 115206#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 115203#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113915#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 113912#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106104#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 106347#L1105-2 assume !(0 != timeShift_~tmp___9~2); 106349#L1196-6 assume !(1 == ~doorState~0); 108003#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 108004#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 105934#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104601#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 104602#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106796#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 107912#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 107220#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 107222#L892-6 assume !(1 == ~currentHeading~0); 108796#L902-18 assume !(0 == ~currentFloorID~0); 108797#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108789#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 120869#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 120867#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 120866#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 120861#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 120859#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 120857#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 120852#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 120851#L2963-1 assume 0 == initPersonOnFloor_~floor; 120821#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 120816#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 120815#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 120810#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 120805#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110638#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 120803#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 120802#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 120801#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 120799#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 120800#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 127082#L1105-3 assume !(0 != timeShift_~tmp___9~2); 127080#L1196-9 assume !(1 == ~doorState~0); 127079#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 127078#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 127077#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 127076#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 127075#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 124551#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 124549#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 124547#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 110297#L892-9 assume !(1 == ~currentHeading~0); 108793#L902-27 assume !(0 == ~currentFloorID~0); 108769#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108759#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 124729#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 119329#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118552#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 114261#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 114242#L1687-7 cleanup_~i~3 := 0; 114146#L2405-2 [2019-12-07 10:08:08,460 INFO L796 eck$LassoCheckResult]: Loop: 114146#L2405-2 assume !false; 114140#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 114071#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 114068#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 114067#L2413 assume 1 != cleanup_~tmp___0~11; 114066#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 114064#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 114065#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 114008#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 113996#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 113997#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 120558#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 113978#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 110646#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 113969#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 113964#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 113966#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 119196#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106097#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 106300#L1105-4 assume !(0 != timeShift_~tmp___9~2); 106302#L1196-12 assume !(1 == ~doorState~0); 108019#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 107862#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 105996#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 104593#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 104594#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106776#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 119987#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 119985#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 118767#L892-12 assume !(1 == ~currentHeading~0); 118764#L902-36 assume !(0 == ~currentFloorID~0); 118748#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 118741#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 129738#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 119341#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 118593#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 118594#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 114243#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 114146#L2405-2 [2019-12-07 10:08:08,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:08,460 INFO L82 PathProgramCache]: Analyzing trace with hash -41972007, now seen corresponding path program 1 times [2019-12-07 10:08:08,460 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:08,461 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1588728800] [2019-12-07 10:08:08,461 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:08,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:08,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:08,514 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1588728800] [2019-12-07 10:08:08,514 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:08:08,514 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:08:08,514 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [589759442] [2019-12-07 10:08:08,515 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:08:08,515 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:08,515 INFO L82 PathProgramCache]: Analyzing trace with hash 898320888, now seen corresponding path program 1 times [2019-12-07 10:08:08,515 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:08,515 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927448439] [2019-12-07 10:08:08,516 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:08,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:08,565 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:08,566 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927448439] [2019-12-07 10:08:08,566 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:08:08,566 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 10:08:08,566 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377538212] [2019-12-07 10:08:08,566 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:08:08,566 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:08:08,566 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 10:08:08,567 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-12-07 10:08:08,567 INFO L87 Difference]: Start difference. First operand 30676 states and 57522 transitions. cyclomatic complexity: 26848 Second operand 8 states. [2019-12-07 10:08:15,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:08:15,655 INFO L93 Difference]: Finished difference Result 297779 states and 560972 transitions. [2019-12-07 10:08:15,655 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2019-12-07 10:08:15,656 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 297779 states and 560972 transitions. [2019-12-07 10:08:16,854 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 85500 [2019-12-07 10:08:17,573 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 297779 states to 297779 states and 560972 transitions. [2019-12-07 10:08:17,574 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 297779 [2019-12-07 10:08:17,745 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 297779 [2019-12-07 10:08:17,746 INFO L73 IsDeterministic]: Start isDeterministic. Operand 297779 states and 560972 transitions. [2019-12-07 10:08:17,873 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 10:08:17,873 INFO L688 BuchiCegarLoop]: Abstraction has 297779 states and 560972 transitions. [2019-12-07 10:08:18,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297779 states and 560972 transitions. [2019-12-07 10:08:21,842 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297779 to 61174. [2019-12-07 10:08:21,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61174 states. [2019-12-07 10:08:21,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61174 states to 61174 states and 114683 transitions. [2019-12-07 10:08:21,920 INFO L711 BuchiCegarLoop]: Abstraction has 61174 states and 114683 transitions. [2019-12-07 10:08:21,920 INFO L591 BuchiCegarLoop]: Abstraction has 61174 states and 114683 transitions. [2019-12-07 10:08:21,920 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-12-07 10:08:21,920 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 61174 states and 114683 transitions. [2019-12-07 10:08:22,046 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 13784 [2019-12-07 10:08:22,046 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:08:22,047 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:08:22,050 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:22,050 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:22,051 INFO L794 eck$LassoCheckResult]: Stem: 437615#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 437616#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 438786#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 439119#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 435689#L2596 assume 0 != main_~tmp~26; 435690#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 433685#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 433024#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 436203#L2963 assume 0 == initPersonOnFloor_~floor; 436205#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 433334#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 434775#L2755 assume !(0 == callOnFloor_~floorID); 437265#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 437266#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 437885#L2692 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 440375#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 432838#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 432839#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 437781#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 437782#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 442397#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 442395#L1105 assume !(0 != timeShift_~tmp___9~2); 442394#L1196 assume !(1 == ~doorState~0); 442393#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 442392#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 442391#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 442390#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 442388#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 442386#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 442321#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 442309#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 442298#L892 assume !(1 == ~currentHeading~0); 442293#L902 assume !(0 == ~currentFloorID~0); 442287#L902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 440019#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 440020#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 434706#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 434707#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 440008#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 437455#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 436858#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 436859#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 456852#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 433090#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 433092#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 437799#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 456850#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 456848#L1105-1 assume !(0 != timeShift_~tmp___9~2); 456847#L1196-3 assume !(1 == ~doorState~0); 456846#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 456845#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 456844#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 456843#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 456841#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 456839#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 456835#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 456829#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 456825#L892-3 assume !(1 == ~currentHeading~0); 456823#L902-9 assume !(0 == ~currentFloorID~0); 438939#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 456814#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 451875#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 439547#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 451871#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 451872#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 451863#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 451864#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 434513#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 434514#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 433096#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 433098#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 458078#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 458077#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 458075#L1105-2 assume !(0 != timeShift_~tmp___9~2); 458074#L1196-6 assume !(1 == ~doorState~0); 458072#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 458073#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 458014#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 458015#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 435447#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 435448#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 465968#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 465965#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 465963#L892-6 assume !(1 == ~currentHeading~0); 437612#L902-18 assume !(0 == ~currentFloorID~0); 437613#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 437605#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 465021#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 462519#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 465018#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 465012#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 465010#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 465008#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 465003#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 465001#L2963-1 assume 0 == initPersonOnFloor_~floor; 465002#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 468362#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 468361#L2755-2 assume !(0 == callOnFloor_~floorID); 468358#L2758-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 468356#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 468355#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 464482#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 468354#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 468353#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 468352#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 457432#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 434675#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 471916#L1105-3 assume !(0 != timeShift_~tmp___9~2); 471915#L1196-9 assume !(1 == ~doorState~0); 471914#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 436927#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 436928#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 433109#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 433110#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 437775#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 436626#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 435899#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 435901#L892-9 assume !(1 == ~currentHeading~0); 437609#L902-27 assume !(0 == ~currentFloorID~0); 437585#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 434347#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 474270#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 474271#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 474263#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 474264#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 439240#L1687-7 cleanup_~i~3 := 0; 437293#L2405-2 [2019-12-07 10:08:22,051 INFO L796 eck$LassoCheckResult]: Loop: 437293#L2405-2 assume !false; 437215#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 437216#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 435485#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 435486#L2413 assume 1 != cleanup_~tmp___0~11; 437985#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 473155#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 474181#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 474182#L391 assume !(0 != anyStopRequested_~tmp___3~0); 474169#L395 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 474158#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 490889#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 490888#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 476470#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 476471#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 490868#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 433074#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 433076#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 461381#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 434677#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 491984#L1105-4 assume !(0 != timeShift_~tmp___9~2); 491983#L1196-12 assume !(1 == ~doorState~0); 491982#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 491981#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 491980#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 491979#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 491977#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 491975#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 491973#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 491972#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 439192#L892-12 assume !(1 == ~currentHeading~0); 437577#L902-36 assume !(0 == ~currentFloorID~0); 437578#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 437381#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 436472#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 436473#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 433085#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 433086#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 439218#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 437293#L2405-2 [2019-12-07 10:08:22,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:22,052 INFO L82 PathProgramCache]: Analyzing trace with hash 1906137606, now seen corresponding path program 1 times [2019-12-07 10:08:22,052 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:22,052 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [916536882] [2019-12-07 10:08:22,052 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:22,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:22,096 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:22,096 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [916536882] [2019-12-07 10:08:22,096 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:08:22,096 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:08:22,096 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2104137371] [2019-12-07 10:08:22,097 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:08:22,097 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:22,097 INFO L82 PathProgramCache]: Analyzing trace with hash -1896202286, now seen corresponding path program 1 times [2019-12-07 10:08:22,097 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:22,097 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [10793137] [2019-12-07 10:08:22,097 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:22,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:22,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:22,129 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [10793137] [2019-12-07 10:08:22,129 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:08:22,129 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 10:08:22,130 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1513611591] [2019-12-07 10:08:22,130 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:08:22,130 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:08:22,130 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 10:08:22,130 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-12-07 10:08:22,130 INFO L87 Difference]: Start difference. First operand 61174 states and 114683 transitions. cyclomatic complexity: 53511 Second operand 8 states. [2019-12-07 10:08:37,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:08:37,514 INFO L93 Difference]: Finished difference Result 354610 states and 664543 transitions. [2019-12-07 10:08:37,515 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2019-12-07 10:08:37,515 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 354610 states and 664543 transitions. [2019-12-07 10:08:38,607 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 98246 [2019-12-07 10:08:39,483 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 354610 states to 354610 states and 664543 transitions. [2019-12-07 10:08:39,484 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 354610 [2019-12-07 10:08:39,691 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 354610 [2019-12-07 10:08:39,691 INFO L73 IsDeterministic]: Start isDeterministic. Operand 354610 states and 664543 transitions. [2019-12-07 10:08:39,842 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 10:08:39,842 INFO L688 BuchiCegarLoop]: Abstraction has 354610 states and 664543 transitions. [2019-12-07 10:08:40,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354610 states and 664543 transitions. [2019-12-07 10:08:41,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354610 to 60633. [2019-12-07 10:08:41,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60633 states. [2019-12-07 10:08:41,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60633 states to 60633 states and 113644 transitions. [2019-12-07 10:08:41,658 INFO L711 BuchiCegarLoop]: Abstraction has 60633 states and 113644 transitions. [2019-12-07 10:08:41,658 INFO L591 BuchiCegarLoop]: Abstraction has 60633 states and 113644 transitions. [2019-12-07 10:08:41,658 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-12-07 10:08:41,658 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60633 states and 113644 transitions. [2019-12-07 10:08:41,787 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 13742 [2019-12-07 10:08:41,787 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:08:41,787 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:08:41,790 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:41,790 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:08:41,790 INFO L794 eck$LassoCheckResult]: Stem: 853390#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 853391#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 854546#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 854896#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 851498#L2596 assume 0 != main_~tmp~26; 851499#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 849567#L2178 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 848904#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 852007#L2963 assume 0 == initPersonOnFloor_~floor; 852009#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 849216#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 850603#L2755 assume !(0 == callOnFloor_~floorID); 853052#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 853053#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 850877#L2692 assume !(0 == isFloorCalling_~floorID); 850879#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 849742#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 855274#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 855275#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 853551#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 853552#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 863689#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 863685#L1105 assume !(0 != timeShift_~tmp___9~2); 863474#L1196 assume !(1 == ~doorState~0); 863449#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 855320#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 850585#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 848723#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 848724#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 851239#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 866474#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 866469#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 866467#L892 assume !(1 == ~currentHeading~0); 866463#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 866464#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 850258#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 853049#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 864110#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 864108#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 864103#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 864102#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 852652#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 852653#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 864486#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 864485#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 864482#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 864475#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 864472#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 864470#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 864469#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 864467#L1105-1 assume !(0 != timeShift_~tmp___9~2); 864466#L1196-3 assume !(1 == ~doorState~0); 864464#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 864463#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 864460#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 864459#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 864457#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 864455#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 864037#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 864027#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 864015#L892-3 assume !(1 == ~currentHeading~0); 864001#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 863991#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 857147#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 857148#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 860644#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 860645#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 860634#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 860633#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 852565#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 852566#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 883233#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 883232#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 883230#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 883224#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 883207#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 883204#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 883201#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 883197#L1105-2 assume !(0 != timeShift_~tmp___9~2); 883193#L1196-6 assume !(1 == ~doorState~0); 883194#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 883185#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 857187#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 883179#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 883180#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 885986#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 883167#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 883164#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 883142#L892-6 assume !(1 == ~currentHeading~0); 883138#L902-18 assume !(0 == ~currentFloorID~0); 853388#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 853016#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 852736#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 850468#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 849009#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 849010#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 855018#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 849579#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 849407#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 852016#L2963-1 assume 0 == initPersonOnFloor_~floor; 852017#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 848862#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 850614#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 853237#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 855399#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 855396#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 855395#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 855391#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 855390#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 855388#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 850513#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 858840#L1105-3 assume !(0 != timeShift_~tmp___9~2); 858841#L1196-9 assume !(1 == ~doorState~0); 870456#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 869939#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 869940#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 869935#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 869936#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 869929#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 869930#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 869922#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 869143#L892-9 assume !(1 == ~currentHeading~0); 868986#L902-27 assume !(0 == ~currentFloorID~0); 868976#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 863969#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 863970#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 863961#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 863962#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 863957#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 863958#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 863953#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 863954#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 863945#L1687-7 cleanup_~i~3 := 0; 863943#L2405-2 [2019-12-07 10:08:41,791 INFO L796 eck$LassoCheckResult]: Loop: 863943#L2405-2 assume !false; 863944#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 863939#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 863940#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 863935#L2413 assume 1 != cleanup_~tmp___0~11; 863936#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 863931#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 863932#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 863927#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 863928#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 863923#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 863924#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 863915#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 863916#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 863911#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 863912#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 853532#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 853533#L956-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 862348#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 862349#L1105-4 assume !(0 != timeShift_~tmp___9~2); 893730#L1196-12 assume !(1 == ~doorState~0); 893729#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 893728#L2692-112 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893727#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 893726#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 893724#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 893722#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 893719#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 893714#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 893712#L892-12 assume !(1 == ~currentHeading~0); 892518#L902-36 assume !(0 == ~currentFloorID~0); 892507#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 892501#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 893757#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 893755#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 893754#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 893753#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 893752#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 893751#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 863972#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 863946#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 863943#L2405-2 [2019-12-07 10:08:41,791 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:41,791 INFO L82 PathProgramCache]: Analyzing trace with hash 1045817053, now seen corresponding path program 1 times [2019-12-07 10:08:41,791 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:41,792 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016062067] [2019-12-07 10:08:41,792 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:41,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:41,833 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:41,833 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016062067] [2019-12-07 10:08:41,834 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:08:41,834 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:08:41,834 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1199608572] [2019-12-07 10:08:41,834 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:08:41,834 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:41,834 INFO L82 PathProgramCache]: Analyzing trace with hash -56707482, now seen corresponding path program 1 times [2019-12-07 10:08:41,834 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:08:41,835 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [801329344] [2019-12-07 10:08:41,835 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:08:41,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 10:08:41,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 10:08:41,877 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-12-07 10:08:42,349 WARN L192 SmtUtils]: Spent 467.00 ms on a formula simplification. DAG size of input: 191 DAG size of output: 172 [2019-12-07 10:08:42,974 WARN L192 SmtUtils]: Spent 560.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 121 [2019-12-07 10:08:42,981 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 10:08:42,982 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 10:08:42,982 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 10:08:42,982 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 10:08:42,982 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-12-07 10:08:42,982 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:42,982 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 10:08:42,982 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 10:08:42,982 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration5_Loop [2019-12-07 10:08:42,982 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 10:08:42,983 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 10:08:43,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,007 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,045 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,050 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,053 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,054 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,057 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,067 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,072 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,131 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,139 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,141 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,142 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:43,561 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 10:08:43,561 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:43,566 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:08:43,566 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:08:43,571 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:08:43,571 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:43,575 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:08:43,576 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:08:43,584 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:08:43,584 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:43,588 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:08:43,588 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:08:43,593 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:08:43,593 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~10=1, ULTIMATE.start_isExecutiveFloor_#res=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16=1} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_~tmp___0~10=1, ULTIMATE.start_isExecutiveFloor_#res=1, ULTIMATE.start_isExecutiveFloor_~retValue_acc~16=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:43,597 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:08:43,597 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:43,608 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-12-07 10:08:43,609 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:08:53,768 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-12-07 10:08:53,772 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 10:08:53,773 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 10:08:53,773 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 10:08:53,773 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 10:08:53,773 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-12-07 10:08:53,773 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:53,773 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 10:08:53,773 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 10:08:53,773 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration5_Loop [2019-12-07 10:08:53,773 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 10:08:53,773 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 10:08:53,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,812 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,824 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,835 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,846 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,871 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,901 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,902 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,903 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,904 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,905 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:53,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:08:54,303 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 10:08:54,307 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:54,310 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:08:54,312 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:08:54,312 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:08:54,312 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:08:54,312 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:08:54,312 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:08:54,314 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:08:54,314 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:08:54,315 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:54,320 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:08:54,321 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:08:54,321 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:08:54,321 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:08:54,322 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:08:54,322 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:08:54,322 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:08:54,322 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:08:54,323 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:54,328 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:08:54,329 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:08:54,329 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:08:54,329 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:08:54,329 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:08:54,329 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:08:54,329 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:08:54,329 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:08:54,330 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:54,334 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:08:54,335 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:08:54,335 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:08:54,335 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:08:54,336 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:08:54,336 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:08:54,338 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:08:54,338 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:08:54,343 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-12-07 10:08:54,348 INFO L443 ModelExtractionUtils]: Simplification made 2 calls to the SMT solver. [2019-12-07 10:08:54,348 INFO L444 ModelExtractionUtils]: 10 out of 12 variables were initially zero. Simplification set additionally 0 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:08:54,956 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-12-07 10:08:54,956 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-12-07 10:08:54,957 INFO L510 LassoAnalysis]: Proved termination. [2019-12-07 10:08:54,957 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2019-12-07 10:08:54,961 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-12-07 10:08:54,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:08:55,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:55,116 INFO L264 TraceCheckSpWp]: Trace formula consists of 1032 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 10:08:55,121 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 10:08:55,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:08:55,165 INFO L264 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 18 conjunts are in the unsatisfiable core [2019-12-07 10:08:55,167 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 10:08:55,216 INFO L319 QuantifierPusher]: Applying distributivity, recursing on 2 terms [2019-12-07 10:08:55,249 INFO L319 QuantifierPusher]: Applying distributivity, recursing on 2 terms [2019-12-07 10:08:55,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:08:55,263 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 8 loop predicates [2019-12-07 10:08:55,264 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 60633 states and 113644 transitions. cyclomatic complexity: 53017 Second operand 10 states. [2019-12-07 10:08:59,551 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 60633 states and 113644 transitions. cyclomatic complexity: 53017. Second operand 10 states. Result 205603 states and 384276 transitions. Complement of second has 27 states. [2019-12-07 10:08:59,552 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 14 states 1 stem states 12 non-accepting loop states 1 accepting loop states [2019-12-07 10:08:59,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2019-12-07 10:08:59,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 30411 transitions. [2019-12-07 10:08:59,576 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30411 transitions. Stem has 133 letters. Loop has 41 letters. [2019-12-07 10:08:59,579 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 10:08:59,579 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30411 transitions. Stem has 174 letters. Loop has 41 letters. [2019-12-07 10:08:59,580 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 10:08:59,581 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 14 states and 30411 transitions. Stem has 133 letters. Loop has 82 letters. [2019-12-07 10:08:59,582 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 10:08:59,582 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 205603 states and 384276 transitions. [2019-12-07 10:09:00,357 INFO L131 ngComponentsAnalysis]: Automaton has 24 accepting balls. 74053 [2019-12-07 10:09:01,103 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 205603 states to 205603 states and 384276 transitions. [2019-12-07 10:09:01,103 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 132842 [2019-12-07 10:09:01,220 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 133186 [2019-12-07 10:09:01,220 INFO L73 IsDeterministic]: Start isDeterministic. Operand 205603 states and 384276 transitions. [2019-12-07 10:09:01,220 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:09:01,221 INFO L688 BuchiCegarLoop]: Abstraction has 205603 states and 384276 transitions. [2019-12-07 10:09:01,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205603 states and 384276 transitions. [2019-12-07 10:09:02,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205603 to 111300. [2019-12-07 10:09:02,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 111300 states. [2019-12-07 10:09:03,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111300 states to 111300 states and 208478 transitions. [2019-12-07 10:09:03,023 INFO L711 BuchiCegarLoop]: Abstraction has 111300 states and 208478 transitions. [2019-12-07 10:09:03,023 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:09:03,023 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 10:09:03,023 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 10:09:03,023 INFO L87 Difference]: Start difference. First operand 111300 states and 208478 transitions. Second operand 3 states. [2019-12-07 10:09:03,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:09:03,564 INFO L93 Difference]: Finished difference Result 189583 states and 355018 transitions. [2019-12-07 10:09:03,565 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 10:09:03,565 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 189583 states and 355018 transitions. [2019-12-07 10:09:04,151 INFO L131 ngComponentsAnalysis]: Automaton has 42 accepting balls. 70840 [2019-12-07 10:09:04,612 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 189583 states to 189583 states and 355018 transitions. [2019-12-07 10:09:04,612 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 137749 [2019-12-07 10:09:04,702 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 137749 [2019-12-07 10:09:04,702 INFO L73 IsDeterministic]: Start isDeterministic. Operand 189583 states and 355018 transitions. [2019-12-07 10:09:04,702 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:09:04,702 INFO L688 BuchiCegarLoop]: Abstraction has 189583 states and 355018 transitions. [2019-12-07 10:09:04,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189583 states and 355018 transitions. [2019-12-07 10:09:05,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189583 to 111300. [2019-12-07 10:09:05,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 111300 states. [2019-12-07 10:09:05,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111300 states to 111300 states and 208472 transitions. [2019-12-07 10:09:05,947 INFO L711 BuchiCegarLoop]: Abstraction has 111300 states and 208472 transitions. [2019-12-07 10:09:05,947 INFO L591 BuchiCegarLoop]: Abstraction has 111300 states and 208472 transitions. [2019-12-07 10:09:05,947 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-12-07 10:09:05,947 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 111300 states and 208472 transitions. [2019-12-07 10:09:06,257 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 35420 [2019-12-07 10:09:06,257 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:09:06,257 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:09:06,259 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:06,259 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:06,260 INFO L794 eck$LassoCheckResult]: Stem: 1422203#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1422204#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 1423627#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 1424064#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 1419907#L2596 assume 0 != main_~tmp~26; 1419908#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 1417499#L2178 assume !(0 == getOrigin_~person); 1417269#L2182 assume !(1 == getOrigin_~person); 1416697#L2186 assume !(2 == getOrigin_~person); 1416698#L2190 assume !(3 == getOrigin_~person); 1418550#L2194 assume !(4 == getOrigin_~person); 1418551#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 1423456#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1420505#L2963 assume 0 == initPersonOnFloor_~floor; 1420507#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1417067#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1418821#L2755 assume !(0 == callOnFloor_~floorID); 1421733#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1421734#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1419153#L2692 assume !(0 == isFloorCalling_~floorID); 1419154#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1417700#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1424588#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1424582#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1424574#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1424565#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1424566#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1424580#L1105 assume !(0 != timeShift_~tmp___9~2); 1424573#L1196 assume !(1 == ~doorState~0); 1424564#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1424553#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1424554#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1429899#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1429898#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1422388#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1421018#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 1420116#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1420117#L892 assume !(1 == ~currentHeading~0); 1433076#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1423881#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1418354#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1421270#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1418740#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1416824#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 1416825#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 1424246#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1421277#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1418741#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1416829#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1416769#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1416770#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1417559#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 1418724#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 1419719#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1420523#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1419042#L1105-1 assume !(0 != timeShift_~tmp___9~2); 1419044#L1196-3 assume !(1 == ~doorState~0); 1432225#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1424887#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1424885#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1424884#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1424881#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1424882#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1432298#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 1432295#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1432293#L892-3 assume !(1 == ~currentHeading~0); 1432291#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1423840#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1422221#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1441181#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1436897#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1441180#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 1441175#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 1441173#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1441172#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1424627#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1441171#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1436860#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1436861#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1449151#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 1436800#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 1436801#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1436796#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1436797#L1105-2 assume !(0 != timeShift_~tmp___9~2); 1436789#L1196-6 assume !(1 == ~doorState~0); 1436790#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1421139#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1421140#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1416810#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1416811#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1419622#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1436267#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 1436262#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1436254#L892-6 assume !(1 == ~currentHeading~0); 1436253#L902-18 assume !(0 == ~currentFloorID~0); 1448028#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1448016#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1448017#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1439616#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1439617#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 1439610#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 1421958#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 1417512#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 1417287#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1420516#L2963-1 assume 0 == initPersonOnFloor_~floor; 1420517#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1416639#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1418833#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1421997#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1451880#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1451879#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1451878#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1449882#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1422341#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1422342#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1439595#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1454075#L1105-3 assume !(0 != timeShift_~tmp___9~2); 1458392#L1196-9 assume !(1 == ~doorState~0); 1459562#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1459561#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1459560#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1459559#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1459554#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1459513#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1459512#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 1452036#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1452038#L892-9 assume !(1 == ~currentHeading~0); 1422194#L902-27 assume !(0 == ~currentFloorID~0); 1422195#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1458529#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1458528#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1458525#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1416793#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 1416794#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1424223#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 1482756#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 1482754#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 1482752#L1687-7 cleanup_~i~3 := 0; 1482750#L2405-2 assume !false; 1482751#L2406 [2019-12-07 10:09:06,260 INFO L796 eck$LassoCheckResult]: Loop: 1482751#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1509210#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 1509209#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 1509208#L2413 assume 1 != cleanup_~tmp___0~11; 1509207#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1509206#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1509205#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 1509200#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 1509198#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 1509194#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1509156#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1508871#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1493019#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1508864#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1508862#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1508860#L2692-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1508856#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 1508847#L925-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 1508844#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1508840#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1508837#L1105-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 1508838#L1107-8 assume !(0 != ~persons_0~0); 1511184#L1107-9 assume !(0 != ~persons_1~0); 1511158#L1121-4 assume !(0 != ~persons_2~0); 1511133#L1135-4 assume !(0 != ~persons_3~0); 1511110#L1149-4 assume !(0 != ~persons_4~0); 1511108#L1163-4 assume !(0 != ~persons_5~0); 1511104#L1177-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret29, processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~9, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~9;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1511102#L2783-48 assume 0 == isPersonOnFloor_~floor; 1511059#L2784-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1511030#L2955-24 processWaitingOnFloor_#t~ret29 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret29;havoc processWaitingOnFloor_#t~ret29; 1511028#L1006-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 1511024#L1006-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1511023#L2783-50 assume 0 == isPersonOnFloor_~floor; 1510984#L2784-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1510977#L2955-25 processWaitingOnFloor_#t~ret31 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret31;havoc processWaitingOnFloor_#t~ret31; 1510975#L1019-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 1510973#L1019-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1510972#L2783-52 assume 0 == isPersonOnFloor_~floor; 1510945#L2784-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1510938#L2955-26 processWaitingOnFloor_#t~ret33 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret33;havoc processWaitingOnFloor_#t~ret33; 1510936#L1032-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 1510934#L1032-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1510933#L2783-54 assume 0 == isPersonOnFloor_~floor; 1510909#L2784-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1510891#L2955-27 processWaitingOnFloor_#t~ret35 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret35;havoc processWaitingOnFloor_#t~ret35; 1510889#L1045-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 1510887#L1045-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1510886#L2783-56 assume 0 == isPersonOnFloor_~floor; 1509798#L2784-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1509775#L2955-28 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 1509773#L1058-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 1509771#L1058-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 1509769#L2783-58 assume 0 == isPersonOnFloor_~floor; 1509731#L2784-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 1509707#L2955-29 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 1509617#L1071-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 1509615#L1071-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 1509612#L2727-68 assume !(0 == resetCallOnFloor_~floorID); 1509355#L2730-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 1509351#L2739-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 1509273#L254-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 1508525#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1509266#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1493103#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1509247#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 1509246#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1509245#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 1509231#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 1509225#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 1509213#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 1508512#L2405-2 assume !false; 1482751#L2406 [2019-12-07 10:09:06,261 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:06,261 INFO L82 PathProgramCache]: Analyzing trace with hash 1683470221, now seen corresponding path program 1 times [2019-12-07 10:09:06,261 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:06,261 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1202916023] [2019-12-07 10:09:06,261 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:06,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:06,316 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:06,317 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1202916023] [2019-12-07 10:09:06,317 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:06,317 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:09:06,317 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [647455568] [2019-12-07 10:09:06,317 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:09:06,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:06,317 INFO L82 PathProgramCache]: Analyzing trace with hash -1930817169, now seen corresponding path program 1 times [2019-12-07 10:09:06,318 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:06,318 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2080136386] [2019-12-07 10:09:06,318 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:06,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:06,350 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:06,350 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2080136386] [2019-12-07 10:09:06,350 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:06,350 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 10:09:06,350 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606810919] [2019-12-07 10:09:06,351 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:09:06,351 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:09:06,351 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 10:09:06,351 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2019-12-07 10:09:06,351 INFO L87 Difference]: Start difference. First operand 111300 states and 208472 transitions. cyclomatic complexity: 97202 Second operand 8 states. [2019-12-07 10:09:12,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:09:12,238 INFO L93 Difference]: Finished difference Result 447705 states and 838027 transitions. [2019-12-07 10:09:12,238 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2019-12-07 10:09:12,238 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 447705 states and 838027 transitions. [2019-12-07 10:09:14,113 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 134559 [2019-12-07 10:09:15,218 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 447705 states to 447705 states and 838027 transitions. [2019-12-07 10:09:15,218 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 320987 [2019-12-07 10:09:15,419 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 320987 [2019-12-07 10:09:15,419 INFO L73 IsDeterministic]: Start isDeterministic. Operand 447705 states and 838027 transitions. [2019-12-07 10:09:15,515 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:09:15,515 INFO L688 BuchiCegarLoop]: Abstraction has 447705 states and 838027 transitions. [2019-12-07 10:09:15,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 447705 states and 838027 transitions. [2019-12-07 10:09:17,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 447705 to 110880. [2019-12-07 10:09:17,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 110880 states. [2019-12-07 10:09:17,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110880 states to 110880 states and 207688 transitions. [2019-12-07 10:09:17,546 INFO L711 BuchiCegarLoop]: Abstraction has 110880 states and 207688 transitions. [2019-12-07 10:09:17,546 INFO L591 BuchiCegarLoop]: Abstraction has 110880 states and 207688 transitions. [2019-12-07 10:09:17,546 INFO L424 BuchiCegarLoop]: ======== Iteration 7============ [2019-12-07 10:09:17,546 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 110880 states and 207688 transitions. [2019-12-07 10:09:17,780 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 35270 [2019-12-07 10:09:17,780 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:09:17,780 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:09:17,782 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:17,782 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:17,782 INFO L794 eck$LassoCheckResult]: Stem: 1981288#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1981289#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 1982660#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 1983094#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 1978947#L2596 assume 0 != main_~tmp~26; 1978948#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 1976583#L2178 assume !(0 == getOrigin_~person); 1976352#L2182 assume !(1 == getOrigin_~person); 1975776#L2186 assume !(2 == getOrigin_~person); 1975777#L2190 assume !(3 == getOrigin_~person); 1977607#L2194 assume !(4 == getOrigin_~person); 1977608#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 1982495#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1979562#L2963 assume 0 == initPersonOnFloor_~floor; 1979564#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1976146#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1977853#L2755 assume !(0 == callOnFloor_~floorID); 1980832#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1980833#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1978181#L2692 assume !(0 == isFloorCalling_~floorID); 1978183#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1983557#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1983558#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1983553#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1983554#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1983546#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1979567#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1978052#L1105 assume !(0 != timeShift_~tmp___9~2); 1978054#L1196 assume !(1 == ~doorState~0); 1980296#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1983562#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1977829#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1975509#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1975510#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1978634#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1980108#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 1979157#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1979158#L892 assume !(1 == ~currentHeading~0); 1983378#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1982914#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1977413#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1980361#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1977773#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1975905#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 1975906#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 1981098#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1983249#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1977774#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1977775#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1975849#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1975850#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1977754#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 1977755#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 1979583#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1979584#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2003997#L1105-1 assume !(0 != timeShift_~tmp___9~2); 2003996#L1196-3 assume !(1 == ~doorState~0); 2003995#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1980348#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1977757#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1975915#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1975916#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2003990#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2003981#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2003950#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2003951#L892-3 assume !(1 == ~currentHeading~0); 2003972#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2003971#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1997834#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1997831#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1997830#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1997829#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 1994975#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 1994974#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1980276#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1980277#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1995460#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1995461#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1980220#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1975998#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 1978717#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 1978718#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1997816#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 1997814#L1105-2 assume !(0 != timeShift_~tmp___9~2); 1997813#L1196-6 assume !(1 == ~doorState~0); 1997812#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1997810#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1997809#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1997808#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 1997806#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1997804#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 1996439#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 1996417#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 1996398#L892-6 assume !(1 == ~currentHeading~0); 1996389#L902-18 assume !(0 == ~currentFloorID~0); 1996383#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1996375#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2016370#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2009790#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2016369#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2016364#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2016362#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 2016360#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 2016355#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1979575#L2963-1 assume 0 == initPersonOnFloor_~floor; 1979576#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1977865#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1977866#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1983789#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 1983790#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 1983781#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 1983782#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 1983777#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1983778#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1983773#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1977732#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2009051#L1105-3 assume !(0 != timeShift_~tmp___9~2); 2009053#L1196-9 assume !(1 == ~doorState~0); 2016044#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2016043#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2016042#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2016041#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2016039#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2016038#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2016029#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2015506#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2015507#L892-9 assume !(1 == ~currentHeading~0); 2013579#L902-27 assume !(0 == ~currentFloorID~0); 2012691#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2012690#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2009285#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2009286#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2009281#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2009282#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2019773#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2019774#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2019767#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2019766#L1687-7 cleanup_~i~3 := 0; 2019757#L2405-2 assume !false; 2019758#L2406 [2019-12-07 10:09:17,783 INFO L796 eck$LassoCheckResult]: Loop: 2019758#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2040741#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 2040740#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 2040739#L2413 assume 1 != cleanup_~tmp___0~11; 2040738#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2040737#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2040736#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 2040735#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 2040734#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 2040733#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 2040731#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2040728#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2038522#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2040727#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2040726#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2040725#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2040723#L956-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2040718#L2692-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2040716#L2719-110 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2040713#L925-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2040712#L937-8 stopRequestedAtCurrentFloor_#t~ret27 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2040711#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2040709#L1105-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2040710#L1107-8 assume !(0 != ~persons_0~0); 2043401#L1107-9 assume !(0 != ~persons_1~0); 2043328#L1121-4 assume !(0 != ~persons_2~0); 2043297#L1135-4 assume !(0 != ~persons_3~0); 2043274#L1149-4 assume !(0 != ~persons_4~0); 2043272#L1163-4 assume !(0 != ~persons_5~0); 2043268#L1177-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret29, processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~9, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~9;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2043267#L2783-48 assume 0 == isPersonOnFloor_~floor; 2043261#L2784-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2043218#L2955-24 processWaitingOnFloor_#t~ret29 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret29;havoc processWaitingOnFloor_#t~ret29; 2043201#L1006-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 2043198#L1006-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2043196#L2783-50 assume 0 == isPersonOnFloor_~floor; 2043163#L2784-25 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2043162#L2955-25 processWaitingOnFloor_#t~ret31 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret31;havoc processWaitingOnFloor_#t~ret31; 2043122#L1019-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 2043119#L1019-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2043116#L2783-52 assume 0 == isPersonOnFloor_~floor; 2042940#L2784-26 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2042933#L2955-26 processWaitingOnFloor_#t~ret33 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret33;havoc processWaitingOnFloor_#t~ret33; 2042925#L1032-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2042922#L1032-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2042921#L2783-54 assume 0 == isPersonOnFloor_~floor; 2042891#L2784-27 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2042873#L2955-27 processWaitingOnFloor_#t~ret35 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret35;havoc processWaitingOnFloor_#t~ret35; 2042871#L1045-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2042869#L1045-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2042868#L2783-56 assume 0 == isPersonOnFloor_~floor; 2042849#L2784-28 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2042831#L2955-28 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 2042828#L1058-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2042825#L1058-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2042824#L2783-58 assume 0 == isPersonOnFloor_~floor; 2042752#L2784-29 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2042723#L2955-29 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 2042720#L1071-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2042719#L1071-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2042717#L2727-68 assume !(0 == resetCallOnFloor_~floorID); 2042715#L2730-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2042712#L2739-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2042707#L254-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2042202#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2040750#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2038592#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2040749#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2040748#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2040747#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2040746#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2040744#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2040742#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 2020703#L2405-2 assume !false; 2019758#L2406 [2019-12-07 10:09:17,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:17,783 INFO L82 PathProgramCache]: Analyzing trace with hash 1683470221, now seen corresponding path program 2 times [2019-12-07 10:09:17,783 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:17,783 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702786242] [2019-12-07 10:09:17,783 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:17,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:17,836 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:17,836 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702786242] [2019-12-07 10:09:17,836 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:17,836 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:09:17,836 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1966204754] [2019-12-07 10:09:17,837 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:09:17,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:17,837 INFO L82 PathProgramCache]: Analyzing trace with hash 1990958615, now seen corresponding path program 1 times [2019-12-07 10:09:17,837 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:17,837 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [144774250] [2019-12-07 10:09:17,837 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:17,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:17,858 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:17,859 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [144774250] [2019-12-07 10:09:17,859 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:17,859 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 10:09:17,859 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028168760] [2019-12-07 10:09:17,859 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:09:17,859 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:09:17,859 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 10:09:17,860 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 10:09:17,860 INFO L87 Difference]: Start difference. First operand 110880 states and 207688 transitions. cyclomatic complexity: 96838 Second operand 5 states. [2019-12-07 10:09:20,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:09:20,705 INFO L93 Difference]: Finished difference Result 156965 states and 289583 transitions. [2019-12-07 10:09:20,706 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 10:09:20,706 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 156965 states and 289583 transitions. [2019-12-07 10:09:21,161 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 45637 [2019-12-07 10:09:21,524 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 156965 states to 156965 states and 289583 transitions. [2019-12-07 10:09:21,524 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 118967 [2019-12-07 10:09:21,586 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 118967 [2019-12-07 10:09:21,587 INFO L73 IsDeterministic]: Start isDeterministic. Operand 156965 states and 289583 transitions. [2019-12-07 10:09:21,603 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:09:21,603 INFO L688 BuchiCegarLoop]: Abstraction has 156965 states and 289583 transitions. [2019-12-07 10:09:21,678 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156965 states and 289583 transitions. [2019-12-07 10:09:22,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156965 to 110880. [2019-12-07 10:09:22,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 110880 states. [2019-12-07 10:09:22,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110880 states to 110880 states and 205263 transitions. [2019-12-07 10:09:22,706 INFO L711 BuchiCegarLoop]: Abstraction has 110880 states and 205263 transitions. [2019-12-07 10:09:22,706 INFO L591 BuchiCegarLoop]: Abstraction has 110880 states and 205263 transitions. [2019-12-07 10:09:22,707 INFO L424 BuchiCegarLoop]: ======== Iteration 8============ [2019-12-07 10:09:22,707 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 110880 states and 205263 transitions. [2019-12-07 10:09:22,938 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 35270 [2019-12-07 10:09:22,939 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:09:22,939 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:09:22,941 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:22,941 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:22,941 INFO L794 eck$LassoCheckResult]: Stem: 2249212#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2249213#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 2250678#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 2251141#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 2246895#L2596 assume 0 != main_~tmp~26; 2246896#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 2244467#L2178 assume !(0 == getOrigin_~person); 2244220#L2182 assume !(1 == getOrigin_~person); 2243644#L2186 assume !(2 == getOrigin_~person); 2243645#L2190 assume !(3 == getOrigin_~person); 2245521#L2194 assume !(4 == getOrigin_~person); 2245522#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 2250503#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2247496#L2963 assume 0 == initPersonOnFloor_~floor; 2247498#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2244023#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2245793#L2755 assume !(0 == callOnFloor_~floorID); 2248747#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2248748#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2246133#L2692 assume !(0 == isFloorCalling_~floorID); 2246135#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2244671#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2251683#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2251676#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2251669#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2251658#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2251660#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2251674#L1105 assume !(0 != timeShift_~tmp___9~2); 2251668#L1196 assume !(1 == ~doorState~0); 2251657#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2251646#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2246142#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2254334#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2254331#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2249392#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2249393#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2247106#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2247107#L892 assume !(1 == ~currentHeading~0); 2251474#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2250952#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2245332#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2248276#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2245709#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2243773#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2243774#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2249009#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2248286#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2245710#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2243778#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2243717#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2243718#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2244530#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2245689#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2246709#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2266317#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2266314#L1105-1 assume !(0 != timeShift_~tmp___9~2); 2266309#L1196-3 assume !(1 == ~doorState~0); 2266306#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2266302#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2263993#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2266232#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2266166#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2266156#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2266154#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2266150#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2266151#L892-3 assume !(1 == ~currentHeading~0); 2266518#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2250915#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2245320#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2248730#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2256640#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2269350#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2269345#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2269342#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2269340#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2256616#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2269334#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2269332#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2268642#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2268636#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2268632#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2266927#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2266928#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2276162#L1105-2 assume !(0 != timeShift_~tmp___9~2); 2276161#L1196-6 assume !(1 == ~doorState~0); 2276158#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2276156#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2256554#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2276153#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2276151#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2275951#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2275872#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2275324#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2275322#L892-6 assume !(1 == ~currentHeading~0); 2275301#L902-18 assume !(0 == ~currentFloorID~0); 2275296#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2275287#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2275286#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2256264#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2275285#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2275280#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2275278#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 2275276#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 2275271#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2275269#L2963-1 assume 0 == initPersonOnFloor_~floor; 2275270#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2275229#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2275230#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2279943#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2279942#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2267281#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2279941#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2279940#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2279939#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2279938#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2272710#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2272711#L1105-3 assume !(0 != timeShift_~tmp___9~2); 2272705#L1196-9 assume !(1 == ~doorState~0); 2272706#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2272701#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2272702#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2272697#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2272698#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2272618#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2272617#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2272613#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2272614#L892-9 assume !(1 == ~currentHeading~0); 2249204#L902-27 assume !(0 == ~currentFloorID~0); 2249205#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2301239#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2301240#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2256262#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2301237#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2251293#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2251294#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2308735#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2308733#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2308730#L1687-7 cleanup_~i~3 := 0; 2308727#L2405-2 assume !false; 2308728#L2406 [2019-12-07 10:09:22,941 INFO L796 eck$LassoCheckResult]: Loop: 2308728#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2335258#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 2335259#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 2336655#L2413 assume 1 != cleanup_~tmp___0~11; 2336653#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2336646#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2336645#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 2336644#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 2336643#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 2336609#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 2336602#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2336587#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2320590#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2336584#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2336583#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2336532#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2336522#L956-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2336513#L2692-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2335941#L2719-110 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2335938#L925-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2335932#L937-8 stopRequestedAtCurrentFloor_#t~ret27 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2335916#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2335913#L1105-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2335914#L1107-8 assume !(0 != ~persons_0~0); 2341667#L1107-9 assume !(0 != ~persons_1~0); 2341647#L1121-4 assume !(0 != ~persons_2~0); 2341634#L1135-4 assume !(0 != ~persons_3~0); 2341622#L1149-4 assume !(0 != ~persons_4~0); 2341620#L1163-4 assume !(0 != ~persons_5~0); 2341526#L1177-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret29, processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~9, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~9;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2341525#L2783-48 assume 0 == isPersonOnFloor_~floor; 2341518#L2784-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2341483#L2955-24 processWaitingOnFloor_#t~ret29 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret29;havoc processWaitingOnFloor_#t~ret29; 2341481#L1006-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 2339876#L1006-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2339874#L2783-50 assume 0 == isPersonOnFloor_~floor; 2339875#L2784-25 assume !(0 == isPersonOnFloor_~person); 2339834#L2788-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2339828#L2955-25 processWaitingOnFloor_#t~ret31 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret31;havoc processWaitingOnFloor_#t~ret31; 2339825#L1019-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 2339821#L1019-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2339817#L2783-52 assume 0 == isPersonOnFloor_~floor; 2339818#L2784-26 assume !(0 == isPersonOnFloor_~person); 2339793#L2788-26 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2339781#L2955-26 processWaitingOnFloor_#t~ret33 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret33;havoc processWaitingOnFloor_#t~ret33; 2339778#L1032-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2339776#L1032-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2339774#L2783-54 assume 0 == isPersonOnFloor_~floor; 2339775#L2784-27 assume !(0 == isPersonOnFloor_~person); 2339743#L2788-27 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2339726#L2955-27 processWaitingOnFloor_#t~ret35 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret35;havoc processWaitingOnFloor_#t~ret35; 2339724#L1045-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2339722#L1045-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2339720#L2783-56 assume 0 == isPersonOnFloor_~floor; 2339719#L2784-28 assume !(0 == isPersonOnFloor_~person); 2339707#L2788-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2339686#L2955-28 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 2339684#L1058-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2339682#L1058-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2339679#L2783-58 assume 0 == isPersonOnFloor_~floor; 2339680#L2784-29 assume !(0 == isPersonOnFloor_~person); 2339632#L2788-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2339604#L2955-29 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 2339483#L1071-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2339484#L1071-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2339467#L2727-68 assume !(0 == resetCallOnFloor_~floorID); 2339469#L2730-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2339572#L2739-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2335280#L254-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2335273#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2335272#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2317314#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2335271#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2335269#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2335270#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2339473#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2339465#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2339463#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 2335260#L2405-2 assume !false; 2308728#L2406 [2019-12-07 10:09:22,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:22,942 INFO L82 PathProgramCache]: Analyzing trace with hash 1683470221, now seen corresponding path program 3 times [2019-12-07 10:09:22,942 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:22,942 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1069514284] [2019-12-07 10:09:22,942 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:22,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:22,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:22,999 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1069514284] [2019-12-07 10:09:22,999 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:23,000 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:09:23,000 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [230444747] [2019-12-07 10:09:23,000 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:09:23,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:23,000 INFO L82 PathProgramCache]: Analyzing trace with hash -494125595, now seen corresponding path program 1 times [2019-12-07 10:09:23,000 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:23,000 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1641615643] [2019-12-07 10:09:23,000 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:23,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:23,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:23,014 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1641615643] [2019-12-07 10:09:23,015 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:23,015 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:09:23,015 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [129697754] [2019-12-07 10:09:23,015 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:09:23,015 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:09:23,015 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 10:09:23,015 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 10:09:23,015 INFO L87 Difference]: Start difference. First operand 110880 states and 205263 transitions. cyclomatic complexity: 94413 Second operand 3 states. [2019-12-07 10:09:24,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:09:24,522 INFO L93 Difference]: Finished difference Result 187473 states and 345610 transitions. [2019-12-07 10:09:24,522 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 10:09:24,522 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 187473 states and 345610 transitions. [2019-12-07 10:09:25,098 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 60541 [2019-12-07 10:09:25,757 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 187473 states to 187473 states and 345610 transitions. [2019-12-07 10:09:25,757 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 142485 [2019-12-07 10:09:25,826 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 142485 [2019-12-07 10:09:25,826 INFO L73 IsDeterministic]: Start isDeterministic. Operand 187473 states and 345610 transitions. [2019-12-07 10:09:25,867 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:09:25,867 INFO L688 BuchiCegarLoop]: Abstraction has 187473 states and 345610 transitions. [2019-12-07 10:09:25,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187473 states and 345610 transitions. [2019-12-07 10:09:26,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187473 to 109425. [2019-12-07 10:09:26,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 109425 states. [2019-12-07 10:09:26,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109425 states to 109425 states and 201383 transitions. [2019-12-07 10:09:26,988 INFO L711 BuchiCegarLoop]: Abstraction has 109425 states and 201383 transitions. [2019-12-07 10:09:26,988 INFO L591 BuchiCegarLoop]: Abstraction has 109425 states and 201383 transitions. [2019-12-07 10:09:26,988 INFO L424 BuchiCegarLoop]: ======== Iteration 9============ [2019-12-07 10:09:26,988 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 109425 states and 201383 transitions. [2019-12-07 10:09:27,219 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 34775 [2019-12-07 10:09:27,219 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:09:27,220 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:09:27,221 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:27,221 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:27,222 INFO L794 eck$LassoCheckResult]: Stem: 2547345#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2547346#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 2548763#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 2549198#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 2545134#L2596 assume 0 != main_~tmp~26; 2545135#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 2542798#L2178 assume !(0 == getOrigin_~person); 2542557#L2182 assume !(1 == getOrigin_~person); 2541984#L2186 assume !(2 == getOrigin_~person); 2541985#L2190 assume !(3 == getOrigin_~person); 2543820#L2194 assume !(4 == getOrigin_~person); 2543821#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 2548586#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2545721#L2963 assume 0 == initPersonOnFloor_~floor; 2545723#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2542359#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2544082#L2755 assume !(0 == callOnFloor_~floorID); 2546907#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2546908#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2544388#L2692 assume !(0 == isFloorCalling_~floorID); 2544390#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2550397#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2550396#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2550394#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2550395#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2550376#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2550374#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2550372#L1105 assume !(0 != timeShift_~tmp___9~2); 2550371#L1196 assume !(1 == ~doorState~0); 2550370#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2550369#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2544058#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2544059#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2544832#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2544833#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2547519#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2545345#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2545346#L892 assume !(1 == ~currentHeading~0); 2553413#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2549031#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2553408#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2570097#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2550000#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2570096#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2570089#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2570086#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2570083#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2549919#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2570079#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2570077#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2570069#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2570065#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2570061#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2570058#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2570056#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2570053#L1105-1 assume !(0 != timeShift_~tmp___9~2); 2570051#L1196-3 assume !(1 == ~doorState~0); 2570050#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2570049#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2562718#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2570043#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2570040#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2570018#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2570017#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2570015#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2570016#L892-3 assume !(1 == ~currentHeading~0); 2569010#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2569001#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2547361#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2566003#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2556745#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2565969#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2565964#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2565962#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2565961#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2556730#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2565955#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2565954#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2565945#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2565939#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2565936#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2565935#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2565147#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2564839#L1105-2 assume !(0 != timeShift_~tmp___9~2); 2564840#L1196-6 assume !(1 == ~doorState~0); 2569242#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2569241#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2558892#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2569240#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2569238#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2569239#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2569399#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2569393#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2569394#L892-6 assume !(1 == ~currentHeading~0); 2574274#L902-18 assume !(0 == ~currentFloorID~0); 2561655#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2561649#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2561648#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2561589#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2561647#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2561642#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2561640#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 2561636#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 2561631#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2561629#L2963-1 assume 0 == initPersonOnFloor_~floor; 2561594#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2561557#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2561491#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2561483#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2561481#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2561479#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2561477#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2561476#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2561475#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2561474#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2548889#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2544227#L1105-3 assume !(0 != timeShift_~tmp___9~2); 2544229#L1196-9 assume !(1 == ~doorState~0); 2546359#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2546364#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2543901#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2542069#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2542070#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2544815#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2597053#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2597051#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2549281#L892-9 assume !(1 == ~currentHeading~0); 2549282#L902-27 assume !(0 == ~currentFloorID~0); 2596976#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2596977#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2601197#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2554200#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2601190#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2596968#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2596969#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2600747#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2600746#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2596958#L1687-7 cleanup_~i~3 := 0; 2596959#L2405-2 assume !false; 2600708#L2406 [2019-12-07 10:09:27,222 INFO L796 eck$LassoCheckResult]: Loop: 2600708#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2626339#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 2626338#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 2626337#L2413 assume 1 != cleanup_~tmp___0~11; 2626336#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2626334#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2626333#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 2626330#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 2626328#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 2626327#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 2626326#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2626322#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2617821#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2626320#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2626317#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2626316#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2626313#L956-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2626310#L2692-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2626308#L2719-110 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2626127#L925-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2626124#L937-8 stopRequestedAtCurrentFloor_#t~ret27 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2626087#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2626085#L1105-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2626086#L1107-8 assume !(0 != ~persons_0~0); 2626905#L1107-9 assume !(0 != ~persons_1~0); 2626880#L1121-4 assume !(0 != ~persons_2~0); 2626855#L1135-4 assume !(0 != ~persons_3~0); 2626832#L1149-4 assume !(0 != ~persons_4~0); 2626830#L1163-4 assume !(0 != ~persons_5~0); 2626826#L1177-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret29, processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~9, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~9;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2626825#L2783-48 assume 0 == isPersonOnFloor_~floor; 2626818#L2784-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2626783#L2955-24 processWaitingOnFloor_#t~ret29 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret29;havoc processWaitingOnFloor_#t~ret29; 2626781#L1006-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 2626737#L1006-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2626734#L2783-50 assume 0 == isPersonOnFloor_~floor; 2626733#L2784-25 assume !(0 == isPersonOnFloor_~person); 2626709#L2788-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2626698#L2955-25 processWaitingOnFloor_#t~ret31 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret31;havoc processWaitingOnFloor_#t~ret31; 2626684#L1019-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 2626623#L1019-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2626619#L2783-52 assume 0 == isPersonOnFloor_~floor; 2626616#L2784-26 assume !(0 == isPersonOnFloor_~person); 2626613#L2788-26 assume !(1 == isPersonOnFloor_~person); 2626601#L2792-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2626598#L2955-26 processWaitingOnFloor_#t~ret33 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret33;havoc processWaitingOnFloor_#t~ret33; 2626590#L1032-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2626587#L1032-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2626583#L2783-54 assume 0 == isPersonOnFloor_~floor; 2626581#L2784-27 assume !(0 == isPersonOnFloor_~person); 2626562#L2788-27 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2626550#L2955-27 processWaitingOnFloor_#t~ret35 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret35;havoc processWaitingOnFloor_#t~ret35; 2626548#L1045-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2626530#L1045-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2626528#L2783-56 assume 0 == isPersonOnFloor_~floor; 2626529#L2784-28 assume !(0 == isPersonOnFloor_~person); 2626508#L2788-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2626492#L2955-28 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 2626479#L1058-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2626460#L1058-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2626458#L2783-58 assume 0 == isPersonOnFloor_~floor; 2626457#L2784-29 assume !(0 == isPersonOnFloor_~person); 2626451#L2788-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2626419#L2955-29 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 2626410#L1071-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2626407#L1071-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2626399#L2727-68 assume !(0 == resetCallOnFloor_~floorID); 2626394#L2730-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2626390#L2739-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2626384#L254-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2626370#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2626365#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2617887#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2626356#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2626347#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2626346#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2626345#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2626343#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2626341#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 2626340#L2405-2 assume !false; 2600708#L2406 [2019-12-07 10:09:27,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:27,222 INFO L82 PathProgramCache]: Analyzing trace with hash 1683470221, now seen corresponding path program 4 times [2019-12-07 10:09:27,223 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:27,223 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820845240] [2019-12-07 10:09:27,223 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:27,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:27,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:27,273 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820845240] [2019-12-07 10:09:27,273 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:27,273 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:09:27,274 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [940939015] [2019-12-07 10:09:27,274 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:09:27,274 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:27,274 INFO L82 PathProgramCache]: Analyzing trace with hash 700031397, now seen corresponding path program 1 times [2019-12-07 10:09:27,274 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:27,275 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [835197298] [2019-12-07 10:09:27,275 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:27,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:27,292 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:27,292 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [835197298] [2019-12-07 10:09:27,292 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:27,292 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:09:27,292 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2032244710] [2019-12-07 10:09:27,293 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:09:27,293 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:09:27,293 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 10:09:27,293 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 10:09:27,293 INFO L87 Difference]: Start difference. First operand 109425 states and 201383 transitions. cyclomatic complexity: 91988 Second operand 3 states. [2019-12-07 10:09:28,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:09:28,687 INFO L93 Difference]: Finished difference Result 179519 states and 329023 transitions. [2019-12-07 10:09:28,688 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 10:09:28,688 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 179519 states and 329023 transitions. [2019-12-07 10:09:29,238 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 57835 [2019-12-07 10:09:29,669 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 179519 states to 179519 states and 329023 transitions. [2019-12-07 10:09:29,669 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 136335 [2019-12-07 10:09:29,757 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 136335 [2019-12-07 10:09:29,757 INFO L73 IsDeterministic]: Start isDeterministic. Operand 179519 states and 329023 transitions. [2019-12-07 10:09:29,783 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:09:29,783 INFO L688 BuchiCegarLoop]: Abstraction has 179519 states and 329023 transitions. [2019-12-07 10:09:29,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 179519 states and 329023 transitions. [2019-12-07 10:09:30,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 179519 to 108455. [2019-12-07 10:09:30,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 108455 states. [2019-12-07 10:09:31,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108455 states to 108455 states and 197988 transitions. [2019-12-07 10:09:31,155 INFO L711 BuchiCegarLoop]: Abstraction has 108455 states and 197988 transitions. [2019-12-07 10:09:31,155 INFO L591 BuchiCegarLoop]: Abstraction has 108455 states and 197988 transitions. [2019-12-07 10:09:31,155 INFO L424 BuchiCegarLoop]: ======== Iteration 10============ [2019-12-07 10:09:31,155 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 108455 states and 197988 transitions. [2019-12-07 10:09:31,384 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 34445 [2019-12-07 10:09:31,384 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:09:31,384 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:09:31,385 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:31,386 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:31,386 INFO L794 eck$LassoCheckResult]: Stem: 2836317#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2836318#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 2837779#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 2838215#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 2834062#L2596 assume 0 != main_~tmp~26; 2834063#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 2831741#L2178 assume !(0 == getOrigin_~person); 2831496#L2182 assume !(1 == getOrigin_~person); 2830918#L2186 assume !(2 == getOrigin_~person); 2830919#L2190 assume !(3 == getOrigin_~person); 2832767#L2194 assume !(4 == getOrigin_~person); 2832768#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 2837608#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2834655#L2963 assume 0 == initPersonOnFloor_~floor; 2834657#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2831290#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2833031#L2755 assume !(0 == callOnFloor_~floorID); 2835845#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2835846#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2833321#L2692 assume !(0 == isFloorCalling_~floorID); 2833323#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2848050#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2848053#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2848044#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2848045#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2848027#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2848025#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2848024#L1105 assume !(0 != timeShift_~tmp___9~2); 2848023#L1196 assume !(1 == ~doorState~0); 2848022#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2848021#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2833009#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2830691#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2830692#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2833775#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2848996#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2848994#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2848995#L892 assume !(1 == ~currentHeading~0); 2838991#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2838047#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2832587#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2850491#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2844684#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2850489#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2850484#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2850483#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2850482#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2844653#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2850450#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2850448#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2850445#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2850438#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2850435#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2850432#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2850433#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2861654#L1105-1 assume !(0 != timeShift_~tmp___9~2); 2861653#L1196-3 assume !(1 == ~doorState~0); 2861652#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2861651#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2853540#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2861650#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2861649#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2861617#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2861616#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2861615#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2845631#L892-3 assume !(1 == ~currentHeading~0); 2845632#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2861337#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2836333#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2855531#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2852901#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2855530#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2855525#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2855523#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2855522#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2845621#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2855521#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2855520#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2855518#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2855510#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2855506#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2855505#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2855498#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2855496#L1105-2 assume !(0 != timeShift_~tmp___9~2); 2855497#L1196-6 assume !(1 == ~doorState~0); 2863236#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2863235#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2845623#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2863234#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2863232#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2861120#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2861117#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2861114#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2861110#L892-6 assume !(1 == ~currentHeading~0); 2861109#L902-18 assume !(0 == ~currentFloorID~0); 2852523#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2852517#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2852516#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2839277#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2852515#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2852510#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 2852508#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 2852506#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 2852497#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2852496#L2963-1 assume 0 == initPersonOnFloor_~floor; 2851933#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2851299#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2851297#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2851298#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2851135#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2851133#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2851131#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2851129#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2851127#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2851126#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2851112#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2885885#L1105-3 assume !(0 != timeShift_~tmp___9~2); 2885884#L1196-9 assume !(1 == ~doorState~0); 2885881#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2885880#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2885878#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2885842#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 2851204#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2851205#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 2885622#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 2885620#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 2838303#L892-9 assume !(1 == ~currentHeading~0); 2836309#L902-27 assume !(0 == ~currentFloorID~0); 2836310#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2885561#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2885560#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2872266#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2885559#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2885558#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2885557#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2885556#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2885554#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2885552#L1687-7 cleanup_~i~3 := 0; 2885549#L2405-2 assume !false; 2885550#L2406 [2019-12-07 10:09:31,386 INFO L796 eck$LassoCheckResult]: Loop: 2885550#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2912524#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 2912521#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 2912518#L2413 assume 1 != cleanup_~tmp___0~11; 2912516#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2912509#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2912504#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 2912498#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 2912493#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 2912490#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 2912202#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2912200#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2904059#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2912198#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 2912197#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2912191#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2912188#L956-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2912187#L2692-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2912186#L2719-110 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 2912177#L925-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 2912174#L937-8 stopRequestedAtCurrentFloor_#t~ret27 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 2912171#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 2912168#L1105-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 2912169#L1107-8 assume !(0 != ~persons_0~0); 2921573#L1107-9 assume !(0 != ~persons_1~0); 2921548#L1121-4 assume !(0 != ~persons_2~0); 2921523#L1135-4 assume !(0 != ~persons_3~0); 2921405#L1149-4 assume !(0 != ~persons_4~0); 2921403#L1163-4 assume !(0 != ~persons_5~0); 2921399#L1177-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret29, processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~9, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~9;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2921398#L2783-48 assume 0 == isPersonOnFloor_~floor; 2921391#L2784-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2921356#L2955-24 processWaitingOnFloor_#t~ret29 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret29;havoc processWaitingOnFloor_#t~ret29; 2921354#L1006-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 2921352#L1006-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2921343#L2783-50 assume 0 == isPersonOnFloor_~floor; 2921342#L2784-25 assume !(0 == isPersonOnFloor_~person); 2921318#L2788-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2921309#L2955-25 processWaitingOnFloor_#t~ret31 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret31;havoc processWaitingOnFloor_#t~ret31; 2921307#L1019-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 2920709#L1019-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2920706#L2783-52 assume 0 == isPersonOnFloor_~floor; 2920707#L2784-26 assume !(0 == isPersonOnFloor_~person); 2920775#L2788-26 assume !(1 == isPersonOnFloor_~person); 2920690#L2792-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2920682#L2955-26 processWaitingOnFloor_#t~ret33 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret33;havoc processWaitingOnFloor_#t~ret33; 2920680#L1032-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 2920678#L1032-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2920675#L2783-54 assume 0 == isPersonOnFloor_~floor; 2920676#L2784-27 assume !(0 == isPersonOnFloor_~person); 2920770#L2788-27 assume !(1 == isPersonOnFloor_~person); 2920769#L2792-27 assume !(2 == isPersonOnFloor_~person); 2920662#L2796-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2920653#L2955-27 processWaitingOnFloor_#t~ret35 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret35;havoc processWaitingOnFloor_#t~ret35; 2920651#L1045-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 2920648#L1045-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2920644#L2783-56 assume 0 == isPersonOnFloor_~floor; 2920645#L2784-28 assume !(0 == isPersonOnFloor_~person); 2920627#L2788-28 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2920612#L2955-28 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 2920598#L1058-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 2920589#L1058-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 2920587#L2783-58 assume 0 == isPersonOnFloor_~floor; 2920586#L2784-29 assume !(0 == isPersonOnFloor_~person); 2920573#L2788-29 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 2920549#L2955-29 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 2912698#L1071-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 2912693#L1071-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 2912690#L2727-68 assume !(0 == resetCallOnFloor_~floorID); 2912581#L2730-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 2912577#L2739-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 2912560#L254-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 2911857#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 2912551#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 2904380#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 2912548#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 2912545#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 2912542#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 2912539#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 2912535#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 2912531#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 2911844#L2405-2 assume !false; 2885550#L2406 [2019-12-07 10:09:31,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:31,387 INFO L82 PathProgramCache]: Analyzing trace with hash 1683470221, now seen corresponding path program 5 times [2019-12-07 10:09:31,387 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:31,387 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2145963300] [2019-12-07 10:09:31,387 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:31,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:31,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:31,439 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2145963300] [2019-12-07 10:09:31,439 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:31,439 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:09:31,439 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [756550356] [2019-12-07 10:09:31,440 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:09:31,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:31,440 INFO L82 PathProgramCache]: Analyzing trace with hash 1636863328, now seen corresponding path program 1 times [2019-12-07 10:09:31,440 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:31,440 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1655140841] [2019-12-07 10:09:31,440 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:31,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:31,461 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:31,462 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1655140841] [2019-12-07 10:09:31,462 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:31,462 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 10:09:31,462 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2095606754] [2019-12-07 10:09:31,462 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:09:31,463 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:09:31,463 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 10:09:31,463 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 10:09:31,463 INFO L87 Difference]: Start difference. First operand 108455 states and 197988 transitions. cyclomatic complexity: 89563 Second operand 3 states. [2019-12-07 10:09:32,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:09:32,761 INFO L93 Difference]: Finished difference Result 161321 states and 292387 transitions. [2019-12-07 10:09:32,762 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 10:09:32,762 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 161321 states and 292387 transitions. [2019-12-07 10:09:33,282 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 47155 [2019-12-07 10:09:33,678 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 161321 states to 161321 states and 292387 transitions. [2019-12-07 10:09:33,679 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 122365 [2019-12-07 10:09:33,757 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 122365 [2019-12-07 10:09:33,757 INFO L73 IsDeterministic]: Start isDeterministic. Operand 161321 states and 292387 transitions. [2019-12-07 10:09:33,780 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:09:33,780 INFO L688 BuchiCegarLoop]: Abstraction has 161321 states and 292387 transitions. [2019-12-07 10:09:33,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161321 states and 292387 transitions. [2019-12-07 10:09:34,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161321 to 108455. [2019-12-07 10:09:34,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 108455 states. [2019-12-07 10:09:35,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108455 states to 108455 states and 195078 transitions. [2019-12-07 10:09:35,236 INFO L711 BuchiCegarLoop]: Abstraction has 108455 states and 195078 transitions. [2019-12-07 10:09:35,236 INFO L591 BuchiCegarLoop]: Abstraction has 108455 states and 195078 transitions. [2019-12-07 10:09:35,236 INFO L424 BuchiCegarLoop]: ======== Iteration 11============ [2019-12-07 10:09:35,236 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 108455 states and 195078 transitions. [2019-12-07 10:09:35,410 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 34445 [2019-12-07 10:09:35,410 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:09:35,410 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:09:35,412 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:35,412 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:09:35,412 INFO L794 eck$LassoCheckResult]: Stem: 3106146#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3106147#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 3107587#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 3108033#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 3103869#L2596 assume 0 != main_~tmp~26; 3103870#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 3101517#L2178 assume !(0 == getOrigin_~person); 3101282#L2182 assume !(1 == getOrigin_~person); 3100708#L2186 assume !(2 == getOrigin_~person); 3100709#L2190 assume !(3 == getOrigin_~person); 3102551#L2194 assume !(4 == getOrigin_~person); 3102552#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 3107416#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3104471#L2963 assume 0 == initPersonOnFloor_~floor; 3104473#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3101077#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3102820#L2755 assume !(0 == callOnFloor_~floorID); 3105677#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3105678#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3103110#L2692 assume !(0 == isFloorCalling_~floorID); 3103112#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3109260#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3109263#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3109254#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3109255#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3109237#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3109235#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3109233#L1105 assume !(0 != timeShift_~tmp___9~2); 3109232#L1196 assume !(1 == ~doorState~0); 3109231#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3109229#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3109230#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3111320#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3111319#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3106319#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3104987#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3104080#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3104081#L892 assume !(1 == ~currentHeading~0); 3111224#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3107867#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3102368#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3105232#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3102734#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3100834#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3100835#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3105941#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3105244#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3102735#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3100839#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3100780#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3100781#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3101579#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 3102715#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 3103674#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3104490#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3136005#L1105-1 assume !(0 != timeShift_~tmp___9~2); 3105122#L1196-3 assume !(1 == ~doorState~0); 3105123#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3105134#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3102718#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3100843#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3100844#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3103572#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3118119#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3118116#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3118118#L892-3 assume !(1 == ~currentHeading~0); 3108334#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3107833#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3106163#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3129647#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3125755#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3129645#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3129641#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3129639#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3129638#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3125740#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3129637#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3129636#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3129610#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3129602#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 3129598#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 3129597#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3129596#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3129594#L1105-2 assume !(0 != timeShift_~tmp___9~2); 3129595#L1196-6 assume !(1 == ~doorState~0); 3133819#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3133817#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3125700#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3133813#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3133811#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3133783#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3133781#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3133779#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3132281#L892-6 assume !(1 == ~currentHeading~0); 3132278#L902-18 assume !(0 == ~currentFloorID~0); 3127930#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3127923#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3127916#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3123709#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3127915#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3127910#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3127908#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 3127717#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 3127705#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3127698#L2963-1 assume 0 == initPersonOnFloor_~floor; 3127634#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3127622#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3127128#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3127122#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3123659#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3123658#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3123656#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3123654#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3123650#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3123651#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3120655#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3120656#L1105-3 assume !(0 != timeShift_~tmp___9~2); 3120651#L1196-9 assume !(1 == ~doorState~0); 3120650#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3120649#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3120648#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3120647#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3120646#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3120644#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3120643#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3120640#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3120642#L892-9 assume !(1 == ~currentHeading~0); 3106138#L902-27 assume !(0 == ~currentFloorID~0); 3106139#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3157239#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3157238#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3145229#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3157237#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3157236#L1687-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3157235#L283-15 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3157234#L1577-3 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 3157230#L1692-6 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 3157228#L1687-7 cleanup_~i~3 := 0; 3157225#L2405-2 assume !false; 3157226#L2406 [2019-12-07 10:09:35,412 INFO L796 eck$LassoCheckResult]: Loop: 3157226#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3196031#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3196030#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 3196029#L2413 assume 1 != cleanup_~tmp___0~11; 3196028#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3196027#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3196026#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 3196025#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 3195669#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3195668#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 3195212#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3195207#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3175735#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3195203#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3195201#L952-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3195199#L283-16 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3195192#L956-4 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3195002#L2692-110 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3194997#L2719-110 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 3194993#L925-8 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 3194992#L937-8 stopRequestedAtCurrentFloor_#t~ret27 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3194955#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3194953#L1105-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3194954#L1107-8 assume !(0 != ~persons_0~0); 3196755#L1107-9 assume !(0 != ~persons_1~0); 3196743#L1121-4 assume !(0 != ~persons_2~0); 3196660#L1135-4 assume !(0 != ~persons_3~0); 3196605#L1149-4 assume !(0 != ~persons_4~0); 3196589#L1163-4 assume !(0 != ~persons_5~0); 3196578#L1177-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret29, processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~9, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~9;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3196575#L2783-48 assume 0 == isPersonOnFloor_~floor; 3196570#L2784-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3196535#L2955-24 processWaitingOnFloor_#t~ret29 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret29;havoc processWaitingOnFloor_#t~ret29; 3196526#L1006-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 3196518#L1006-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3196517#L2783-50 assume 0 == isPersonOnFloor_~floor; 3196508#L2784-25 assume !(0 == isPersonOnFloor_~person); 3196484#L2788-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3196480#L2955-25 processWaitingOnFloor_#t~ret31 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret31;havoc processWaitingOnFloor_#t~ret31; 3196472#L1019-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 3196325#L1019-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3196323#L2783-52 assume 0 == isPersonOnFloor_~floor; 3196324#L2784-26 assume !(0 == isPersonOnFloor_~person); 3196329#L2788-26 assume !(1 == isPersonOnFloor_~person); 3196310#L2792-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3196307#L2955-26 processWaitingOnFloor_#t~ret33 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret33;havoc processWaitingOnFloor_#t~ret33; 3196303#L1032-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3196299#L1032-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3196296#L2783-54 assume 0 == isPersonOnFloor_~floor; 3196294#L2784-27 assume !(0 == isPersonOnFloor_~person); 3196292#L2788-27 assume !(1 == isPersonOnFloor_~person); 3196290#L2792-27 assume !(2 == isPersonOnFloor_~person); 3196284#L2796-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3196281#L2955-27 processWaitingOnFloor_#t~ret35 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret35;havoc processWaitingOnFloor_#t~ret35; 3196208#L1045-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3196201#L1045-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3196173#L2783-56 assume !(0 == isPersonOnFloor_~floor); 3196165#L2816-56 assume !(1 == isPersonOnFloor_~floor); 3196162#L2849-56 assume !(2 == isPersonOnFloor_~floor); 3196160#L2882-56 assume !(3 == isPersonOnFloor_~floor); 3196159#L2915-84 assume !(4 == isPersonOnFloor_~floor); 3196132#L2915-86 isPersonOnFloor_~retValue_acc~28 := 0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3196123#L2955-28 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 3196113#L1058-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3196104#L1058-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3196103#L2783-58 assume 0 == isPersonOnFloor_~floor; 3196100#L2784-29 assume !(0 == isPersonOnFloor_~person); 3196094#L2788-29 assume !(1 == isPersonOnFloor_~person); 3196088#L2792-29 assume !(2 == isPersonOnFloor_~person); 3196082#L2796-29 assume !(3 == isPersonOnFloor_~person); 3196070#L2800-29 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3196063#L2955-29 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 3196060#L1071-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3196059#L1071-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3196057#L2727-68 assume !(0 == resetCallOnFloor_~floorID); 3196055#L2730-68 assume 1 == resetCallOnFloor_~floorID;~calls_1~0 := 0; 3196052#L2739-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3196047#L254-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3196042#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3196041#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3175796#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3196040#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3196039#L1687-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___2~5;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3196038#L283-19 __utac_acc__Specification14_spec__1_#t~ret107 := getCurrentFloorID_#res;__utac_acc__Specification14_spec__1_~tmp~14 := __utac_acc__Specification14_spec__1_#t~ret107;havoc __utac_acc__Specification14_spec__1_#t~ret107;isExecutiveFloor_#in~floorID := __utac_acc__Specification14_spec__1_~tmp~14;havoc isExecutiveFloor_#res;havoc isExecutiveFloor_~floorID, isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~floorID := isExecutiveFloor_#in~floorID;havoc isExecutiveFloor_~retValue_acc~16;isExecutiveFloor_~retValue_acc~16 := (if ~executiveFloor~0 == isExecutiveFloor_~floorID then 1 else 0);isExecutiveFloor_#res := isExecutiveFloor_~retValue_acc~16; 3196037#L1577-4 __utac_acc__Specification14_spec__1_#t~ret108 := isExecutiveFloor_#res;__utac_acc__Specification14_spec__1_~tmp___0~10 := __utac_acc__Specification14_spec__1_#t~ret108;havoc __utac_acc__Specification14_spec__1_#t~ret108; 3196035#L1692-8 assume 0 != __utac_acc__Specification14_spec__1_~tmp___0~10; 3196033#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 3196032#L2405-2 assume !false; 3157226#L2406 [2019-12-07 10:09:35,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:35,413 INFO L82 PathProgramCache]: Analyzing trace with hash 1683470221, now seen corresponding path program 6 times [2019-12-07 10:09:35,413 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:35,413 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [519053292] [2019-12-07 10:09:35,413 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:35,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:35,461 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:35,461 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [519053292] [2019-12-07 10:09:35,462 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:35,462 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:09:35,462 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106719672] [2019-12-07 10:09:35,462 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:09:35,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:09:35,463 INFO L82 PathProgramCache]: Analyzing trace with hash -278026264, now seen corresponding path program 1 times [2019-12-07 10:09:35,463 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:09:35,463 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1890802087] [2019-12-07 10:09:35,463 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:09:35,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:09:35,511 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:09:35,511 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1890802087] [2019-12-07 10:09:35,511 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:09:35,512 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2019-12-07 10:09:35,512 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2137796142] [2019-12-07 10:09:35,512 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:09:35,512 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:09:35,512 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-12-07 10:09:35,512 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2019-12-07 10:09:35,512 INFO L87 Difference]: Start difference. First operand 108455 states and 195078 transitions. cyclomatic complexity: 86653 Second operand 9 states. [2019-12-07 10:09:57,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:09:57,965 INFO L93 Difference]: Finished difference Result 502270 states and 906817 transitions. [2019-12-07 10:09:57,965 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2019-12-07 10:09:57,965 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 502270 states and 906817 transitions. [2019-12-07 10:09:59,497 INFO L131 ngComponentsAnalysis]: Automaton has 40 accepting balls. 138015 [2019-12-07 10:10:00,715 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 502270 states to 502234 states and 906781 transitions. [2019-12-07 10:10:00,715 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 378073 [2019-12-07 10:10:00,918 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 378073 [2019-12-07 10:10:00,918 INFO L73 IsDeterministic]: Start isDeterministic. Operand 502234 states and 906781 transitions. [2019-12-07 10:10:00,963 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:10:00,963 INFO L688 BuchiCegarLoop]: Abstraction has 502234 states and 906781 transitions. [2019-12-07 10:10:01,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502234 states and 906781 transitions. [2019-12-07 10:10:03,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502234 to 129949. [2019-12-07 10:10:03,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 129949 states. [2019-12-07 10:10:03,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129949 states to 129949 states and 233290 transitions. [2019-12-07 10:10:03,707 INFO L711 BuchiCegarLoop]: Abstraction has 129949 states and 233290 transitions. [2019-12-07 10:10:03,707 INFO L591 BuchiCegarLoop]: Abstraction has 129949 states and 233290 transitions. [2019-12-07 10:10:03,707 INFO L424 BuchiCegarLoop]: ======== Iteration 12============ [2019-12-07 10:10:03,707 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 129949 states and 233290 transitions. [2019-12-07 10:10:03,977 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 41055 [2019-12-07 10:10:03,977 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:10:03,978 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:10:03,979 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:03,979 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:03,980 INFO L794 eck$LassoCheckResult]: Stem: 3716929#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3716930#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 3718347#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 3718775#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 3714627#L2596 assume 0 != main_~tmp~26; 3714628#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 3712346#L2178 assume !(0 == getOrigin_~person); 3712109#L2182 assume !(1 == getOrigin_~person); 3711548#L2186 assume !(2 == getOrigin_~person); 3711549#L2190 assume !(3 == getOrigin_~person); 3713337#L2194 assume !(4 == getOrigin_~person); 3713338#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 3718189#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3715218#L2963 assume 0 == initPersonOnFloor_~floor; 3715220#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3711912#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3713572#L2755 assume !(0 == callOnFloor_~floorID); 3716454#L2758 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3716455#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3717223#L2692 assume !(0 == isFloorCalling_~floorID); 3719311#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3720703#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3720702#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3719312#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3719313#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 3719299#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3719301#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3719340#L1105 assume !(0 != timeShift_~tmp___9~2); 3719341#L1196 assume !(1 == ~doorState~0); 3720987#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3719294#L2692-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3719295#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3721761#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3721759#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3721757#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3721756#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3721754#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3721753#L892 assume !(1 == ~currentHeading~0); 3716981#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3716982#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3723858#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3721917#L2692-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3720250#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3721912#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3721913#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3718946#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3718947#L2692-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3719498#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3721983#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3721979#L952-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3721980#L2692-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3722019#L2719-28 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 3722020#L925-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 3721991#L937-3 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3721992#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3721985#L1105-1 assume !(0 != timeShift_~tmp___9~2); 3721984#L1196-3 assume !(1 == ~doorState~0); 3721938#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3721939#L2692-29 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3719493#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3721926#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3721918#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3721919#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3734482#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3734483#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3735608#L892-3 assume !(1 == ~currentHeading~0); 3734569#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3718581#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3713147#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3716437#L2692-51 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3724609#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3734636#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3734571#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3716741#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3715928#L2692-52 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3715929#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3711654#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3711655#L952-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3715873#L2692-54 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3711763#L2719-54 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 3713264#L925-5 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 3714410#L937-5 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3715194#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3713811#L1105-2 assume !(0 != timeShift_~tmp___9~2); 3713813#L1196-6 assume !(1 == ~doorState~0); 3742036#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3741865#L2692-55 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3738625#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3741861#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3741862#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3743273#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3743265#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3743257#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3743258#L892-6 assume !(1 == ~currentHeading~0); 3745644#L902-18 assume !(0 == ~currentFloorID~0); 3741712#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3741705#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3741643#L2692-77 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3741644#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3741640#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3741641#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3776817#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 3776815#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 3776810#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3776809#L2963-1 assume 0 == initPersonOnFloor_~floor; 3715454#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3711493#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3716730#L2755-2 assume !(0 == callOnFloor_~floorID); 3716732#L2758-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3717233#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3717234#L2692-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3713416#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3713417#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3711623#L952-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3711624#L2692-80 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3784476#L2719-80 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 3784473#L925-7 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 3784472#L937-7 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3784471#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3784470#L1105-3 assume !(0 != timeShift_~tmp___9~2); 3715876#L1196-9 assume !(1 == ~doorState~0); 3715877#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3715886#L2692-81 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3713408#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3713409#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 3784468#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3784438#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3784436#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 3784437#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 3718850#L892-9 assume !(1 == ~currentHeading~0); 3718851#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3718782#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3716393#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3716394#L2692-103 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3713356#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3711637#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3711638#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3716692#L1687-7 cleanup_~i~3 := 0; 3781443#L2405-2 assume !false; 3781444#L2406 [2019-12-07 10:10:03,980 INFO L796 eck$LassoCheckResult]: Loop: 3781444#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3835814#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3835813#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 3835812#L2413 assume 1 != cleanup_~tmp___0~11; 3835811#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3835810#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3835809#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 3835808#L391 assume !(0 != anyStopRequested_~tmp___3~0); 3835804#L395 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 3835794#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3835793#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 3835783#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3835782#L2692-109 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3820319#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3835781#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 3835780#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3835778#L2692-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3835772#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 3835765#L925-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 3835764#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 3835761#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 3835755#L1105-4 assume 0 != timeShift_~tmp___9~2;~doorState~0 := 1; 3835756#L1107-8 assume !(0 != ~persons_0~0); 3836559#L1107-9 assume !(0 != ~persons_1~0); 3836523#L1121-4 assume !(0 != ~persons_2~0); 3836510#L1135-4 assume !(0 != ~persons_3~0); 3836492#L1149-4 assume !(0 != ~persons_4~0); 3836478#L1163-4 assume !(0 != ~persons_5~0); 3836400#L1177-4 processWaitingOnFloor_#in~floorID := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret29, processWaitingOnFloor_#t~ret30, processWaitingOnFloor_#t~ret31, processWaitingOnFloor_#t~ret32, processWaitingOnFloor_#t~ret33, processWaitingOnFloor_#t~ret34, processWaitingOnFloor_#t~ret35, processWaitingOnFloor_#t~ret36, processWaitingOnFloor_#t~ret37, processWaitingOnFloor_#t~ret38, processWaitingOnFloor_#t~ret39, processWaitingOnFloor_#t~ret40, processWaitingOnFloor_~floorID, processWaitingOnFloor_~tmp~9, processWaitingOnFloor_~tmp___0~5, processWaitingOnFloor_~tmp___1~2, processWaitingOnFloor_~tmp___2~2, processWaitingOnFloor_~tmp___3~2, processWaitingOnFloor_~tmp___4~1, processWaitingOnFloor_~tmp___5~1, processWaitingOnFloor_~tmp___6~1, processWaitingOnFloor_~tmp___7~1, processWaitingOnFloor_~tmp___8~1, processWaitingOnFloor_~tmp___9~1, processWaitingOnFloor_~tmp___10~0;processWaitingOnFloor_~floorID := processWaitingOnFloor_#in~floorID;havoc processWaitingOnFloor_~tmp~9;havoc processWaitingOnFloor_~tmp___0~5;havoc processWaitingOnFloor_~tmp___1~2;havoc processWaitingOnFloor_~tmp___2~2;havoc processWaitingOnFloor_~tmp___3~2;havoc processWaitingOnFloor_~tmp___4~1;havoc processWaitingOnFloor_~tmp___5~1;havoc processWaitingOnFloor_~tmp___6~1;havoc processWaitingOnFloor_~tmp___7~1;havoc processWaitingOnFloor_~tmp___8~1;havoc processWaitingOnFloor_~tmp___9~1;havoc processWaitingOnFloor_~tmp___10~0;isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 0, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3836399#L2783-48 assume 0 == isPersonOnFloor_~floor; 3836392#L2784-24 assume 0 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_0_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3836330#L2955-24 processWaitingOnFloor_#t~ret29 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___0~5 := processWaitingOnFloor_#t~ret29;havoc processWaitingOnFloor_#t~ret29; 3836317#L1006-8 assume !(0 != processWaitingOnFloor_~tmp___0~5); 3836217#L1006-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 1, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3836215#L2783-50 assume 0 == isPersonOnFloor_~floor; 3836209#L2784-25 assume !(0 == isPersonOnFloor_~person); 3836185#L2788-25 assume 1 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_1_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3836055#L2955-25 processWaitingOnFloor_#t~ret31 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___2~2 := processWaitingOnFloor_#t~ret31;havoc processWaitingOnFloor_#t~ret31; 3836045#L1019-8 assume !(0 != processWaitingOnFloor_~tmp___2~2); 3836043#L1019-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 2, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3836040#L2783-52 assume 0 == isPersonOnFloor_~floor; 3836035#L2784-26 assume !(0 == isPersonOnFloor_~person); 3836029#L2788-26 assume !(1 == isPersonOnFloor_~person); 3836023#L2792-26 assume 2 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_2_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3836015#L2955-26 processWaitingOnFloor_#t~ret33 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___4~1 := processWaitingOnFloor_#t~ret33;havoc processWaitingOnFloor_#t~ret33; 3836013#L1032-8 assume !(0 != processWaitingOnFloor_~tmp___4~1); 3836011#L1032-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 3, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3836010#L2783-54 assume 0 == isPersonOnFloor_~floor; 3836007#L2784-27 assume !(0 == isPersonOnFloor_~person); 3836001#L2788-27 assume !(1 == isPersonOnFloor_~person); 3835994#L2792-27 assume !(2 == isPersonOnFloor_~person); 3835987#L2796-27 assume 3 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_3_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3835960#L2955-27 processWaitingOnFloor_#t~ret35 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___6~1 := processWaitingOnFloor_#t~ret35;havoc processWaitingOnFloor_#t~ret35; 3835951#L1045-8 assume !(0 != processWaitingOnFloor_~tmp___6~1); 3835942#L1045-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 4, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3835938#L2783-56 assume 0 == isPersonOnFloor_~floor; 3835933#L2784-28 assume !(0 == isPersonOnFloor_~person); 3835928#L2788-28 assume !(1 == isPersonOnFloor_~person); 3835923#L2792-28 assume !(2 == isPersonOnFloor_~person); 3835918#L2796-28 assume !(3 == isPersonOnFloor_~person); 3835911#L2800-28 assume 4 == isPersonOnFloor_~person;isPersonOnFloor_~retValue_acc~28 := ~personOnFloor_4_0~0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3835898#L2955-28 processWaitingOnFloor_#t~ret37 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___8~1 := processWaitingOnFloor_#t~ret37;havoc processWaitingOnFloor_#t~ret37; 3835889#L1058-8 assume !(0 != processWaitingOnFloor_~tmp___8~1); 3835887#L1058-9 isPersonOnFloor_#in~person, isPersonOnFloor_#in~floor := 5, processWaitingOnFloor_~floorID;havoc isPersonOnFloor_#res;havoc isPersonOnFloor_~person, isPersonOnFloor_~floor, isPersonOnFloor_~retValue_acc~28;isPersonOnFloor_~person := isPersonOnFloor_#in~person;isPersonOnFloor_~floor := isPersonOnFloor_#in~floor;havoc isPersonOnFloor_~retValue_acc~28; 3835882#L2783-58 assume !(0 == isPersonOnFloor_~floor); 3835883#L2816-58 assume !(1 == isPersonOnFloor_~floor); 3835884#L2849-58 assume !(2 == isPersonOnFloor_~floor); 3835885#L2882-58 assume !(3 == isPersonOnFloor_~floor); 3835886#L2915-87 assume !(4 == isPersonOnFloor_~floor); 3835854#L2915-89 isPersonOnFloor_~retValue_acc~28 := 0;isPersonOnFloor_#res := isPersonOnFloor_~retValue_acc~28; 3835844#L2955-29 processWaitingOnFloor_#t~ret39 := isPersonOnFloor_#res;processWaitingOnFloor_~tmp___10~0 := processWaitingOnFloor_#t~ret39;havoc processWaitingOnFloor_#t~ret39; 3835841#L1071-8 assume !(0 != processWaitingOnFloor_~tmp___10~0); 3835840#L1071-9 resetCallOnFloor_#in~floorID := processWaitingOnFloor_~floorID;havoc resetCallOnFloor_~floorID;resetCallOnFloor_~floorID := resetCallOnFloor_#in~floorID; 3835837#L2727-68 assume 0 == resetCallOnFloor_~floorID;~calls_0~0 := 0; 3835834#L2739-104 resetFloorButton_#in~floorID := ~currentFloorID~0;havoc resetFloorButton_~floorID;resetFloorButton_~floorID := resetFloorButton_#in~floorID; 3835828#L254-8 assume 0 == resetFloorButton_~floorID;~floorButtons_0~0 := 0; 3835824#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 3835823#L2692-134 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 3820385#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 3835822#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 3835817#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 3835815#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 3831344#L2405-2 assume !false; 3781444#L2406 [2019-12-07 10:10:03,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:03,980 INFO L82 PathProgramCache]: Analyzing trace with hash 1921937252, now seen corresponding path program 1 times [2019-12-07 10:10:03,981 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:03,981 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1348083808] [2019-12-07 10:10:03,981 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:03,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:04,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:04,030 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1348083808] [2019-12-07 10:10:04,030 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:04,030 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:10:04,030 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [168561170] [2019-12-07 10:10:04,030 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:10:04,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:04,031 INFO L82 PathProgramCache]: Analyzing trace with hash 1269671942, now seen corresponding path program 1 times [2019-12-07 10:10:04,031 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:04,031 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1617339292] [2019-12-07 10:10:04,031 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:04,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:04,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:04,059 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1617339292] [2019-12-07 10:10:04,059 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:04,059 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 10:10:04,060 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [826987282] [2019-12-07 10:10:04,060 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:10:04,060 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:10:04,060 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 10:10:04,060 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 10:10:04,060 INFO L87 Difference]: Start difference. First operand 129949 states and 233290 transitions. cyclomatic complexity: 103387 Second operand 7 states. [2019-12-07 10:10:13,365 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:10:13,365 INFO L93 Difference]: Finished difference Result 636341 states and 1136315 transitions. [2019-12-07 10:10:13,366 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2019-12-07 10:10:13,366 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 636341 states and 1136315 transitions. [2019-12-07 10:10:18,438 INFO L131 ngComponentsAnalysis]: Automaton has 31 accepting balls. 197665 [2019-12-07 10:10:19,924 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 636341 states to 636341 states and 1136315 transitions. [2019-12-07 10:10:19,924 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 441616 [2019-12-07 10:10:20,167 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 441616 [2019-12-07 10:10:20,167 INFO L73 IsDeterministic]: Start isDeterministic. Operand 636341 states and 1136315 transitions. [2019-12-07 10:10:20,170 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:10:20,170 INFO L688 BuchiCegarLoop]: Abstraction has 636341 states and 1136315 transitions. [2019-12-07 10:10:20,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 636341 states and 1136315 transitions. [2019-12-07 10:10:22,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 636341 to 130183. [2019-12-07 10:10:22,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 130183 states. [2019-12-07 10:10:23,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130183 states to 130183 states and 233510 transitions. [2019-12-07 10:10:23,010 INFO L711 BuchiCegarLoop]: Abstraction has 130183 states and 233510 transitions. [2019-12-07 10:10:23,010 INFO L591 BuchiCegarLoop]: Abstraction has 130183 states and 233510 transitions. [2019-12-07 10:10:23,010 INFO L424 BuchiCegarLoop]: ======== Iteration 13============ [2019-12-07 10:10:23,010 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 130183 states and 233510 transitions. [2019-12-07 10:10:23,280 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 41133 [2019-12-07 10:10:23,280 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:10:23,280 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:10:23,282 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:23,282 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:23,282 INFO L794 eck$LassoCheckResult]: Stem: 4483161#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4483162#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 4484513#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 4484930#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 4480893#L2596 assume 0 != main_~tmp~26; 4480894#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 4478685#L2178 assume !(0 == getOrigin_~person); 4478458#L2182 assume !(1 == getOrigin_~person); 4477893#L2186 assume !(2 == getOrigin_~person); 4477894#L2190 assume !(3 == getOrigin_~person); 4479635#L2194 assume !(4 == getOrigin_~person); 4479636#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 4484359#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4481486#L2963 assume 0 == initPersonOnFloor_~floor; 4481488#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4478264#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4479869#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4482962#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4480155#L2692 assume !(0 == isFloorCalling_~floorID); 4480157#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4478875#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4477666#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4477667#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4485412#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4485413#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4481490#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4480057#L1105 assume !(0 != timeShift_~tmp___9~2); 4480059#L1196 assume !(1 == ~doorState~0); 4482192#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4482200#L2692-3 assume !(0 == isFloorCalling_~floorID); 4481887#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4478894#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4477670#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4477671#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4480612#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4482015#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4481101#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4481102#L892 assume !(1 == ~currentHeading~0); 4489985#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4489966#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4487440#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4487441#L2692-25 assume !(0 == isFloorCalling_~floorID); 4482104#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4478772#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4490117#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4490118#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4489979#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4489980#L2692-26 assume !(0 == isFloorCalling_~floorID); 4482073#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4478781#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4503111#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4503110#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4483348#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4483349#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4498205#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4498203#L1105-1 assume !(0 != timeShift_~tmp___9~2); 4498204#L1196-3 assume !(1 == ~doorState~0); 4490029#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4490030#L2692-29 assume !(0 == isFloorCalling_~floorID); 4482080#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4478749#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4503039#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4503040#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4503267#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4503529#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4503527#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4503528#L892-3 assume !(1 == ~currentHeading~0); 4504101#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4503211#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4479454#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4488549#L2692-51 assume !(0 == isFloorCalling_~floorID); 4488550#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4488537#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4488538#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4488513#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4488512#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4488499#L2692-52 assume !(0 == isFloorCalling_~floorID); 4488500#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4503108#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4503109#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4503104#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4503105#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4485468#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4481511#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4500481#L1105-2 assume !(0 != timeShift_~tmp___9~2); 4500483#L1196-6 assume !(1 == ~doorState~0); 4489960#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4489961#L2692-55 assume !(0 == isFloorCalling_~floorID); 4499749#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4499746#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4499741#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4499742#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4505091#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4505089#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4505085#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4505029#L892-6 assume !(1 == ~currentHeading~0); 4505025#L902-18 assume !(0 == ~currentFloorID~0); 4505011#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4488487#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4488488#L2692-77 assume !(0 == isFloorCalling_~floorID); 4513527#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4513526#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4513523#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4513521#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4513519#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 4503098#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4503093#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4503091#L2963-1 assume 0 == initPersonOnFloor_~floor; 4503092#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4503050#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4503051#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4513432#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4513431#L2692-78 assume !(0 == isFloorCalling_~floorID); 4513430#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4505904#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4505905#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4505877#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4505878#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4505911#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4505846#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4505840#L1105-3 assume !(0 != timeShift_~tmp___9~2); 4505842#L1196-9 assume !(1 == ~doorState~0); 4488479#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4488480#L2692-81 assume !(0 == isFloorCalling_~floorID); 4504817#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4504815#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4504163#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4504164#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4513642#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4513641#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4513574#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4513394#L892-9 assume !(1 == ~currentHeading~0); 4513376#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4513368#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4531062#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4531060#L2692-103 assume !(0 == isFloorCalling_~floorID); 4531059#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4531055#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4531053#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4531049#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4531047#L1687-7 cleanup_~i~3 := 0; 4531044#L2405-2 assume !false; 4531045#L2406 [2019-12-07 10:10:23,282 INFO L796 eck$LassoCheckResult]: Loop: 4531045#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4549524#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 4549520#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 4549521#L2413 assume 1 != cleanup_~tmp___0~11; 4549472#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4549473#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4549464#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 4549465#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 4549438#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 4549439#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 4548254#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4548255#L2692-109 assume !(0 == isFloorCalling_~floorID); 4550460#L2696-109 assume !(1 == isFloorCalling_~floorID); 4550461#L2700-109 assume !(2 == isFloorCalling_~floorID); 4550464#L2704-109 assume !(3 == isFloorCalling_~floorID); 4550465#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4550503#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4550504#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4550499#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4550500#L2692-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4550491#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 4550492#L925-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 4550451#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4550452#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4550443#L1105-4 assume !(0 != timeShift_~tmp___9~2); 4550445#L1196-12 assume !(1 == ~doorState~0); 4547518#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4547519#L2692-112 assume !(0 == isFloorCalling_~floorID); 4552947#L2696-112 assume !(1 == isFloorCalling_~floorID); 4552946#L2700-112 assume !(2 == isFloorCalling_~floorID); 4552945#L2704-112 assume !(3 == isFloorCalling_~floorID); 4552943#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4552942#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4552941#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4552939#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4552940#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4553736#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4553734#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4553735#L892-12 assume !(1 == ~currentHeading~0); 4559070#L902-36 assume !(0 == ~currentFloorID~0); 4550723#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4549516#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4549517#L2692-134 assume !(0 == isFloorCalling_~floorID); 4549543#L2696-134 assume !(1 == isFloorCalling_~floorID); 4549544#L2700-134 assume !(2 == isFloorCalling_~floorID); 4549540#L2704-134 assume !(3 == isFloorCalling_~floorID); 4549541#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4552993#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4552991#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4552987#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4549527#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 4549528#L2405-2 assume !false; 4531045#L2406 [2019-12-07 10:10:23,283 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:23,283 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 1 times [2019-12-07 10:10:23,283 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:23,283 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1838343329] [2019-12-07 10:10:23,283 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:23,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:23,340 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:23,340 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1838343329] [2019-12-07 10:10:23,340 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:23,340 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:10:23,341 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1446870667] [2019-12-07 10:10:23,341 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:10:23,341 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:23,341 INFO L82 PathProgramCache]: Analyzing trace with hash 675889014, now seen corresponding path program 1 times [2019-12-07 10:10:23,341 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:23,341 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1203062505] [2019-12-07 10:10:23,341 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:23,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:23,364 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:23,365 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1203062505] [2019-12-07 10:10:23,365 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:23,365 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 10:10:23,365 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597830760] [2019-12-07 10:10:23,365 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:10:23,365 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:10:23,365 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 10:10:23,365 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 10:10:23,366 INFO L87 Difference]: Start difference. First operand 130183 states and 233510 transitions. cyclomatic complexity: 103373 Second operand 7 states. [2019-12-07 10:10:24,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:10:24,443 INFO L93 Difference]: Finished difference Result 289007 states and 516959 transitions. [2019-12-07 10:10:24,443 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 10:10:24,444 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 289007 states and 516959 transitions. [2019-12-07 10:10:25,379 INFO L131 ngComponentsAnalysis]: Automaton has 33 accepting balls. 89766 [2019-12-07 10:10:26,554 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 289007 states to 289007 states and 516959 transitions. [2019-12-07 10:10:26,554 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 217069 [2019-12-07 10:10:26,655 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 217069 [2019-12-07 10:10:26,655 INFO L73 IsDeterministic]: Start isDeterministic. Operand 289007 states and 516959 transitions. [2019-12-07 10:10:26,655 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:10:26,655 INFO L688 BuchiCegarLoop]: Abstraction has 289007 states and 516959 transitions. [2019-12-07 10:10:26,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289007 states and 516959 transitions. [2019-12-07 10:10:28,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289007 to 130541. [2019-12-07 10:10:28,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 130541 states. [2019-12-07 10:10:28,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130541 states to 130541 states and 233868 transitions. [2019-12-07 10:10:28,227 INFO L711 BuchiCegarLoop]: Abstraction has 130541 states and 233868 transitions. [2019-12-07 10:10:28,227 INFO L591 BuchiCegarLoop]: Abstraction has 130541 states and 233868 transitions. [2019-12-07 10:10:28,227 INFO L424 BuchiCegarLoop]: ======== Iteration 14============ [2019-12-07 10:10:28,227 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 130541 states and 233868 transitions. [2019-12-07 10:10:28,496 INFO L131 ngComponentsAnalysis]: Automaton has 30 accepting balls. 41256 [2019-12-07 10:10:28,496 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:10:28,496 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:10:28,498 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:28,498 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:28,499 INFO L794 eck$LassoCheckResult]: Stem: 4902369#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4902370#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 4903739#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 4904129#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 4900138#L2596 assume 0 != main_~tmp~26; 4900139#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 4897916#L2178 assume !(0 == getOrigin_~person); 4897693#L2182 assume !(1 == getOrigin_~person); 4897134#L2186 assume !(2 == getOrigin_~person); 4897135#L2190 assume !(3 == getOrigin_~person); 4898884#L2194 assume !(4 == getOrigin_~person); 4898885#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 4903583#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4900731#L2963 assume 0 == initPersonOnFloor_~floor; 4900733#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4897499#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4899127#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4902168#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4899415#L2692 assume !(0 == isFloorCalling_~floorID); 4899417#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4898100#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4904691#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4904692#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4904600#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4904601#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4904614#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4904608#L1105 assume !(0 != timeShift_~tmp___9~2); 4904602#L1196 assume !(1 == ~doorState~0); 4904603#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4904587#L2692-3 assume !(0 == isFloorCalling_~floorID); 4904589#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4899106#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4899107#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4904620#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4904621#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4904617#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4904618#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4904431#L892 assume !(1 == ~currentHeading~0); 4904433#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4904933#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4904930#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4904925#L2692-25 assume !(0 == isFloorCalling_~floorID); 4904926#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4914030#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4914029#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4914025#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4914024#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4914023#L2692-26 assume !(0 == isFloorCalling_~floorID); 4908194#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4904855#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4904856#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4904823#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4904825#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4913965#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4913951#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4913948#L1105-1 assume !(0 != timeShift_~tmp___9~2); 4913947#L1196-3 assume !(1 == ~doorState~0); 4913944#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4913941#L2692-29 assume !(0 == isFloorCalling_~floorID); 4913707#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4913447#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4913445#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4913427#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4913289#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4913282#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4913277#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4913268#L892-3 assume !(1 == ~currentHeading~0); 4913254#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4913232#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4913222#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4913220#L2692-51 assume !(0 == isFloorCalling_~floorID); 4913218#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4913212#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4913204#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4913193#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4913192#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4922779#L2692-52 assume !(0 == isFloorCalling_~floorID); 4922776#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4922773#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4922772#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4922771#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4922710#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4922289#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4922288#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4922286#L1105-2 assume !(0 != timeShift_~tmp___9~2); 4922285#L1196-6 assume !(1 == ~doorState~0); 4922284#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4922263#L2692-55 assume !(0 == isFloorCalling_~floorID); 4922262#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4922258#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4922257#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4922256#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4922188#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4922187#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4922184#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4922030#L892-6 assume !(1 == ~currentHeading~0); 4921960#L902-18 assume !(0 == ~currentFloorID~0); 4921950#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4921941#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4921547#L2692-77 assume !(0 == isFloorCalling_~floorID); 4900778#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4897687#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4924160#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4921935#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4921934#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 4915450#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 4915446#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4953576#L2963-1 assume 0 == initPersonOnFloor_~floor; 4915371#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4915367#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4951118#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 4910644#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4910639#L2692-78 assume !(0 == isFloorCalling_~floorID); 4900783#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4897696#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4908326#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4908327#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4908309#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 4908271#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4908272#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4908257#L1105-3 assume !(0 != timeShift_~tmp___9~2); 4908259#L1196-9 assume !(1 == ~doorState~0); 4960219#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4960217#L2692-81 assume !(0 == isFloorCalling_~floorID); 4960215#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4960212#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4960211#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4960210#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4959470#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4959469#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4959467#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4959468#L892-9 assume !(1 == ~currentHeading~0); 4959297#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4959294#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4959044#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4959042#L2692-103 assume !(0 == isFloorCalling_~floorID); 4959041#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4959037#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4959036#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4959031#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4958999#L1687-7 cleanup_~i~3 := 0; 4959000#L2405-2 assume !false; 4958994#L2406 [2019-12-07 10:10:28,499 INFO L796 eck$LassoCheckResult]: Loop: 4958994#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4958980#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 4955795#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 4955794#L2413 assume 1 != cleanup_~tmp___0~11; 4953569#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4953537#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4953536#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 4950324#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 4950317#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 4950301#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 4937490#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4937486#L2692-109 assume !(0 == isFloorCalling_~floorID); 4937480#L2696-109 assume !(1 == isFloorCalling_~floorID); 4937481#L2700-109 assume !(2 == isFloorCalling_~floorID); 4937482#L2704-109 assume !(3 == isFloorCalling_~floorID); 4937478#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4937479#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4937555#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 4937556#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4937537#L2692-111 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4937531#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 4937532#L925-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4937190#L300-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 4937187#L321-9 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24; 4937178#L932-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 4937180#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 4938197#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 4938195#L1105-4 assume !(0 != timeShift_~tmp___9~2); 4938194#L1196-12 assume !(1 == ~doorState~0); 4938193#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4938192#L2692-112 assume !(0 == isFloorCalling_~floorID); 4938172#L2696-112 assume !(1 == isFloorCalling_~floorID); 4938168#L2700-112 assume !(2 == isFloorCalling_~floorID); 4938169#L2704-112 assume !(3 == isFloorCalling_~floorID); 4938170#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4938171#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4938189#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 4938187#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 4938188#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 4938293#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 4938289#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 4938290#L892-12 assume !(1 == ~currentHeading~0); 4952846#L902-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4952843#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4951245#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 4951236#L2692-134 assume !(0 == isFloorCalling_~floorID); 4951157#L2696-134 assume !(1 == isFloorCalling_~floorID); 4951153#L2700-134 assume !(2 == isFloorCalling_~floorID); 4951154#L2704-134 assume !(3 == isFloorCalling_~floorID); 4951155#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 4951156#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 4959313#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 4959006#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 4959002#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 4958997#L2405-2 assume !false; 4958994#L2406 [2019-12-07 10:10:28,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:28,499 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 2 times [2019-12-07 10:10:28,499 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:28,500 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247262930] [2019-12-07 10:10:28,500 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:28,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:28,550 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:28,550 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [247262930] [2019-12-07 10:10:28,551 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:28,551 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:10:28,551 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1589344471] [2019-12-07 10:10:28,551 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:10:28,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:28,551 INFO L82 PathProgramCache]: Analyzing trace with hash -868114942, now seen corresponding path program 1 times [2019-12-07 10:10:28,551 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:28,551 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1403879066] [2019-12-07 10:10:28,551 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:28,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:28,574 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:28,574 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1403879066] [2019-12-07 10:10:28,574 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:28,574 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 10:10:28,575 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [11156256] [2019-12-07 10:10:28,575 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:10:28,575 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:10:28,575 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 10:10:28,575 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 10:10:28,575 INFO L87 Difference]: Start difference. First operand 130541 states and 233868 transitions. cyclomatic complexity: 103373 Second operand 7 states. [2019-12-07 10:10:34,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:10:34,430 INFO L93 Difference]: Finished difference Result 532751 states and 952038 transitions. [2019-12-07 10:10:34,430 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2019-12-07 10:10:34,430 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 532751 states and 952038 transitions. [2019-12-07 10:10:36,493 INFO L131 ngComponentsAnalysis]: Automaton has 37 accepting balls. 165861 [2019-12-07 10:10:37,731 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 532751 states to 532751 states and 952038 transitions. [2019-12-07 10:10:37,732 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 370129 [2019-12-07 10:10:37,936 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 370129 [2019-12-07 10:10:37,936 INFO L73 IsDeterministic]: Start isDeterministic. Operand 532751 states and 952038 transitions. [2019-12-07 10:10:37,953 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:10:37,953 INFO L688 BuchiCegarLoop]: Abstraction has 532751 states and 952038 transitions. [2019-12-07 10:10:38,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532751 states and 952038 transitions. [2019-12-07 10:10:44,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532751 to 129773. [2019-12-07 10:10:44,170 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 129773 states. [2019-12-07 10:10:44,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129773 states to 129773 states and 232531 transitions. [2019-12-07 10:10:44,380 INFO L711 BuchiCegarLoop]: Abstraction has 129773 states and 232531 transitions. [2019-12-07 10:10:44,380 INFO L591 BuchiCegarLoop]: Abstraction has 129773 states and 232531 transitions. [2019-12-07 10:10:44,380 INFO L424 BuchiCegarLoop]: ======== Iteration 15============ [2019-12-07 10:10:44,380 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 129773 states and 232531 transitions. [2019-12-07 10:10:44,643 INFO L131 ngComponentsAnalysis]: Automaton has 34 accepting balls. 40805 [2019-12-07 10:10:44,643 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:10:44,643 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:10:44,645 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:44,645 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:10:44,646 INFO L794 eck$LassoCheckResult]: Stem: 5565691#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5565692#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 5567026#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 5567418#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 5563445#L2596 assume 0 != main_~tmp~26; 5563446#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 5561252#L2178 assume !(0 == getOrigin_~person); 5561035#L2182 assume !(1 == getOrigin_~person); 5560476#L2186 assume !(2 == getOrigin_~person); 5560477#L2190 assume !(3 == getOrigin_~person); 5562196#L2194 assume !(4 == getOrigin_~person); 5562197#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 5566872#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5564043#L2963 assume 0 == initPersonOnFloor_~floor; 5564045#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5560840#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5562429#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5565493#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5562718#L2692 assume !(0 == isFloorCalling_~floorID); 5562720#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5562427#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5562428#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 5567873#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5567874#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5567861#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5567863#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 5568749#L1105 assume !(0 != timeShift_~tmp___9~2); 5568750#L1196 assume !(1 == ~doorState~0); 5569137#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5567855#L2692-3 assume !(0 == isFloorCalling_~floorID); 5567857#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5567945#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5567946#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 5563160#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5563161#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5567930#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 5567931#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5569115#L892 assume !(1 == ~currentHeading~0); 5569109#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5569102#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5569088#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5569089#L2692-25 assume !(0 == isFloorCalling_~floorID); 5569082#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5569081#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5569076#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5569077#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5569065#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5569066#L2692-26 assume !(0 == isFloorCalling_~floorID); 5571600#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5571596#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5571591#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 5571592#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5571586#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5571587#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5575878#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 5575876#L1105-1 assume !(0 != timeShift_~tmp___9~2); 5575877#L1196-3 assume !(1 == ~doorState~0); 5576953#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5576951#L2692-29 assume !(0 == isFloorCalling_~floorID); 5576949#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5576946#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5576945#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 5576940#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5576941#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5577469#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 5577466#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5577467#L892-3 assume !(1 == ~currentHeading~0); 5579788#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5575114#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5575108#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5578994#L2692-51 assume !(0 == isFloorCalling_~floorID); 5564574#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5560717#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5574482#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5574483#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5574460#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5574461#L2692-52 assume !(0 == isFloorCalling_~floorID); 5564556#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5560724#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5576721#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 5576722#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5565834#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5565835#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5574998#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 5574996#L1105-2 assume !(0 != timeShift_~tmp___9~2); 5574995#L1196-6 assume !(1 == ~doorState~0); 5574994#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5574992#L2692-55 assume !(0 == isFloorCalling_~floorID); 5574991#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5574987#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5574985#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 5574980#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5574981#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5576626#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 5575947#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5574819#L892-6 assume !(1 == ~currentHeading~0); 5574816#L902-18 assume !(0 == ~currentFloorID~0); 5574805#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5574758#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5574723#L2692-77 assume !(0 == isFloorCalling_~floorID); 5564087#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5561029#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5574777#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5574773#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5574771#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 5574769#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 5574764#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5574760#L2963-1 assume 0 == initPersonOnFloor_~floor; 5574731#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 5574720#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5574715#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 5574559#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5574702#L2692-78 assume !(0 == isFloorCalling_~floorID); 5574625#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5574621#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5574610#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 5574611#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5574605#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 5574606#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5600123#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 5608423#L1105-3 assume !(0 != timeShift_~tmp___9~2); 5608422#L1196-9 assume !(1 == ~doorState~0); 5600088#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5600089#L2692-81 assume !(0 == isFloorCalling_~floorID); 5569479#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5569477#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5569470#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 5569471#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5596161#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5596162#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 5608562#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5595827#L892-9 assume !(1 == ~currentHeading~0); 5595828#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5608221#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5608219#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5608212#L2692-103 assume !(0 == isFloorCalling_~floorID); 5608213#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5614198#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5614196#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5614192#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5614190#L1687-7 cleanup_~i~3 := 0; 5614187#L2405-2 assume !false; 5614188#L2406 [2019-12-07 10:10:44,646 INFO L796 eck$LassoCheckResult]: Loop: 5614188#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5632141#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 5632140#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 5632135#L2413 assume 1 != cleanup_~tmp___0~11; 5632119#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5632114#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5632112#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 5632101#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 5632095#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 5632094#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 5632093#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5632091#L2692-109 assume !(0 == isFloorCalling_~floorID); 5632090#L2696-109 assume !(1 == isFloorCalling_~floorID); 5632089#L2700-109 assume !(2 == isFloorCalling_~floorID); 5632088#L2704-109 assume !(3 == isFloorCalling_~floorID); 5632086#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5632085#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5632084#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 5632083#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5632081#L2692-111 assume !(0 == isFloorCalling_~floorID); 5632080#L2696-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5632074#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 5632075#L925-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 5632071#L300-9 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 5632067#L321-9 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24; 5632065#L932-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 5632064#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 5632063#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 5632061#L1105-4 assume !(0 != timeShift_~tmp___9~2); 5632060#L1196-12 assume !(1 == ~doorState~0); 5632059#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5632057#L2692-112 assume !(0 == isFloorCalling_~floorID); 5632056#L2696-112 assume !(1 == isFloorCalling_~floorID); 5632055#L2700-112 assume !(2 == isFloorCalling_~floorID); 5632054#L2704-112 assume !(3 == isFloorCalling_~floorID); 5632052#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5632051#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5632050#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 5632048#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 5632046#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 5632045#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 5629839#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 5629840#L892-12 assume !(1 == ~currentHeading~0); 5638931#L902-36 assume !(0 == ~currentFloorID~0); 5632167#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5632159#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 5632157#L2692-134 assume !(0 == isFloorCalling_~floorID); 5632156#L2696-134 assume !(1 == isFloorCalling_~floorID); 5632155#L2700-134 assume !(2 == isFloorCalling_~floorID); 5632154#L2704-134 assume !(3 == isFloorCalling_~floorID); 5632152#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 5632151#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5632149#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 5632145#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 5632143#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 5632142#L2405-2 assume !false; 5614188#L2406 [2019-12-07 10:10:44,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:44,646 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 3 times [2019-12-07 10:10:44,646 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:44,646 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [306443936] [2019-12-07 10:10:44,647 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:44,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:44,689 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:44,689 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [306443936] [2019-12-07 10:10:44,689 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:44,690 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:10:44,690 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [872035939] [2019-12-07 10:10:44,690 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:10:44,690 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:10:44,690 INFO L82 PathProgramCache]: Analyzing trace with hash 272308944, now seen corresponding path program 1 times [2019-12-07 10:10:44,690 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:10:44,690 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1163978583] [2019-12-07 10:10:44,690 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:10:44,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:10:44,714 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:10:44,715 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1163978583] [2019-12-07 10:10:44,715 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:10:44,715 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 10:10:44,715 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [524157564] [2019-12-07 10:10:44,715 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:10:44,715 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:10:44,715 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 10:10:44,715 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 10:10:44,715 INFO L87 Difference]: Start difference. First operand 129773 states and 232531 transitions. cyclomatic complexity: 102811 Second operand 7 states. [2019-12-07 10:10:53,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:10:53,283 INFO L93 Difference]: Finished difference Result 561752 states and 1004249 transitions. [2019-12-07 10:10:53,283 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2019-12-07 10:10:53,283 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 561752 states and 1004249 transitions. [2019-12-07 10:10:55,117 INFO L131 ngComponentsAnalysis]: Automaton has 86 accepting balls. 173320 [2019-12-07 10:10:56,873 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 561752 states to 560708 states and 1002817 transitions. [2019-12-07 10:10:56,873 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 423307 [2019-12-07 10:10:57,089 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 423307 [2019-12-07 10:10:57,089 INFO L73 IsDeterministic]: Start isDeterministic. Operand 560708 states and 1002817 transitions. [2019-12-07 10:10:57,137 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:10:57,137 INFO L688 BuchiCegarLoop]: Abstraction has 560708 states and 1002817 transitions. [2019-12-07 10:10:57,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 560708 states and 1002817 transitions. [2019-12-07 10:10:59,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 560708 to 196751. [2019-12-07 10:10:59,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196751 states. [2019-12-07 10:11:00,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196751 states to 196751 states and 351446 transitions. [2019-12-07 10:11:00,433 INFO L711 BuchiCegarLoop]: Abstraction has 196751 states and 351446 transitions. [2019-12-07 10:11:00,433 INFO L591 BuchiCegarLoop]: Abstraction has 196751 states and 351446 transitions. [2019-12-07 10:11:00,433 INFO L424 BuchiCegarLoop]: ======== Iteration 16============ [2019-12-07 10:11:00,434 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 196751 states and 351446 transitions. [2019-12-07 10:11:00,772 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 63967 [2019-12-07 10:11:00,772 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:11:00,773 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:11:00,775 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:00,775 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:00,775 INFO L794 eck$LassoCheckResult]: Stem: 6257172#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 6257173#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 6258520#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 6258884#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 6254994#L2596 assume 0 != main_~tmp~26; 6254995#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 6252838#L2178 assume !(0 == getOrigin_~person); 6252613#L2182 assume !(1 == getOrigin_~person); 6252054#L2186 assume !(2 == getOrigin_~person); 6252055#L2190 assume !(3 == getOrigin_~person); 6253799#L2194 assume !(4 == getOrigin_~person); 6253800#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 6258370#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6255569#L2963 assume 0 == initPersonOnFloor_~floor; 6255571#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6252412#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6254020#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6256966#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6254284#L2692 assume !(0 == isFloorCalling_~floorID); 6254286#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6253021#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6254019#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 6259340#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6259329#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6259330#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6259339#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 6259953#L1105 assume !(0 != timeShift_~tmp___9~2); 6259952#L1196 assume !(1 == ~doorState~0); 6259951#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6259948#L2692-3 assume !(0 == isFloorCalling_~floorID); 6259942#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6259918#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6259909#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 6259888#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6259886#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6259885#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 6259883#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 6259884#L892 assume !(1 == ~currentHeading~0); 6261470#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6261395#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6261394#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6262179#L2692-25 assume !(0 == isFloorCalling_~floorID); 6262180#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6262172#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6262173#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 6261384#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 6261385#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6261377#L2692-26 assume !(0 == isFloorCalling_~floorID); 6261379#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6267905#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6267904#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 6265284#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6265285#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6267912#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6267913#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 6273710#L1105-1 assume !(0 != timeShift_~tmp___9~2); 6265254#L1196-3 assume !(1 == ~doorState~0); 6265255#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6276720#L2692-29 assume !(0 == isFloorCalling_~floorID); 6276718#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6276607#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6276601#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 6276598#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6276578#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6276577#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 6276575#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 6276576#L892-3 assume !(1 == ~currentHeading~0); 6276730#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6276188#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6276169#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6276170#L2692-51 assume !(0 == isFloorCalling_~floorID); 6276164#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6276162#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6276154#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 6276155#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 6276144#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6276145#L2692-52 assume !(0 == isFloorCalling_~floorID); 6276134#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6276132#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6276123#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 6276124#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6276112#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6276113#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6276102#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 6276103#L1105-2 assume !(0 != timeShift_~tmp___9~2); 6282663#L1196-6 assume !(1 == ~doorState~0); 6282664#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6275125#L2692-55 assume !(0 == isFloorCalling_~floorID); 6275127#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6282953#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6282951#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 6281561#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6281562#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6282777#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 6282770#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 6282761#L892-6 assume !(1 == ~currentHeading~0); 6282751#L902-18 assume !(0 == ~currentFloorID~0); 6282739#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6282731#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6306480#L2692-77 assume !(0 == isFloorCalling_~floorID); 6306476#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6306475#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6306474#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 6306469#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 6306467#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 6306465#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 6306460#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 6306459#L2963-1 assume 0 == initPersonOnFloor_~floor; 6306429#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6282670#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 6282669#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 6282577#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6282569#L2692-78 assume !(0 == isFloorCalling_~floorID); 6282566#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6282562#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6282307#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 6282308#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6282302#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 6282303#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6303913#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 6303914#L1105-3 assume !(0 != timeShift_~tmp___9~2); 6306382#L1196-9 assume !(1 == ~doorState~0); 6306373#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6306371#L2692-81 assume !(0 == isFloorCalling_~floorID); 6306131#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6306127#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6306125#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 6306124#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6305957#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6305922#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 6305913#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 6305898#L892-9 assume !(1 == ~currentHeading~0); 6305884#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6305872#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6305863#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6305855#L2692-103 assume !(0 == isFloorCalling_~floorID); 6305857#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6305847#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6305848#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 6305837#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 6305836#L1687-7 cleanup_~i~3 := 0; 6297237#L2405-2 assume !false; 6297238#L2406 [2019-12-07 10:11:00,776 INFO L796 eck$LassoCheckResult]: Loop: 6297238#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 6394939#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 6394308#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 6394305#L2413 assume 1 != cleanup_~tmp___0~11; 6394300#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6394297#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6394298#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 6393942#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 6393936#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 6393929#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 6393928#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6393926#L2692-109 assume !(0 == isFloorCalling_~floorID); 6393925#L2696-109 assume !(1 == isFloorCalling_~floorID); 6393924#L2700-109 assume !(2 == isFloorCalling_~floorID); 6393923#L2704-109 assume !(3 == isFloorCalling_~floorID); 6393921#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6393915#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6393913#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 6393912#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6393910#L2692-111 assume !(0 == isFloorCalling_~floorID); 6393911#L2696-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6395421#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 6396209#L925-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 6395372#L300-9 assume !(0 == buttonForFloorIsPressed_~floorID); 6395371#L304-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 6395367#L321-9 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24; 6395365#L932-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 6395364#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 6395363#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 6395361#L1105-4 assume !(0 != timeShift_~tmp___9~2); 6395360#L1196-12 assume !(1 == ~doorState~0); 6395359#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6395357#L2692-112 assume !(0 == isFloorCalling_~floorID); 6395356#L2696-112 assume !(1 == isFloorCalling_~floorID); 6395355#L2700-112 assume !(2 == isFloorCalling_~floorID); 6395354#L2704-112 assume !(3 == isFloorCalling_~floorID); 6395352#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6395351#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6395350#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 6395348#L835-8 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 6395347#L283-17 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 6395345#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 6395343#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 6395338#L892-12 assume !(1 == ~currentHeading~0); 6395002#L902-36 assume !(0 == ~currentFloorID~0); 6394972#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6394964#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 6394962#L2692-134 assume !(0 == isFloorCalling_~floorID); 6394961#L2696-134 assume !(1 == isFloorCalling_~floorID); 6394960#L2700-134 assume !(2 == isFloorCalling_~floorID); 6394959#L2704-134 assume !(3 == isFloorCalling_~floorID); 6394957#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 6394956#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 6394954#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 6394950#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 6394948#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 6394947#L2405-2 assume !false; 6297238#L2406 [2019-12-07 10:11:00,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:00,776 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 4 times [2019-12-07 10:11:00,776 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:00,777 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [328976015] [2019-12-07 10:11:00,777 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:00,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:00,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:00,828 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [328976015] [2019-12-07 10:11:00,828 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:00,828 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:11:00,828 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1729402107] [2019-12-07 10:11:00,828 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:11:00,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:00,828 INFO L82 PathProgramCache]: Analyzing trace with hash -1440191500, now seen corresponding path program 1 times [2019-12-07 10:11:00,829 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:00,829 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1519214788] [2019-12-07 10:11:00,829 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:00,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:00,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:00,847 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1519214788] [2019-12-07 10:11:00,847 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:00,847 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 10:11:00,847 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [576205877] [2019-12-07 10:11:00,847 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:11:00,847 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:11:00,847 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 10:11:00,848 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 10:11:00,848 INFO L87 Difference]: Start difference. First operand 196751 states and 351446 transitions. cyclomatic complexity: 154771 Second operand 5 states. [2019-12-07 10:11:04,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:11:04,879 INFO L93 Difference]: Finished difference Result 636167 states and 1133845 transitions. [2019-12-07 10:11:04,879 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 10:11:04,880 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 636167 states and 1133845 transitions. [2019-12-07 10:11:07,146 INFO L131 ngComponentsAnalysis]: Automaton has 82 accepting balls. 213193 [2019-12-07 10:11:08,630 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 636167 states to 636167 states and 1133845 transitions. [2019-12-07 10:11:08,630 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 483147 [2019-12-07 10:11:08,879 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 483147 [2019-12-07 10:11:08,879 INFO L73 IsDeterministic]: Start isDeterministic. Operand 636167 states and 1133845 transitions. [2019-12-07 10:11:13,378 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:11:13,378 INFO L688 BuchiCegarLoop]: Abstraction has 636167 states and 1133845 transitions. [2019-12-07 10:11:13,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 636167 states and 1133845 transitions. [2019-12-07 10:11:15,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 636167 to 197219. [2019-12-07 10:11:15,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 197219 states. [2019-12-07 10:11:16,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197219 states to 197219 states and 351872 transitions. [2019-12-07 10:11:16,146 INFO L711 BuchiCegarLoop]: Abstraction has 197219 states and 351872 transitions. [2019-12-07 10:11:16,146 INFO L591 BuchiCegarLoop]: Abstraction has 197219 states and 351872 transitions. [2019-12-07 10:11:16,146 INFO L424 BuchiCegarLoop]: ======== Iteration 17============ [2019-12-07 10:11:16,146 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 197219 states and 351872 transitions. [2019-12-07 10:11:16,579 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 64062 [2019-12-07 10:11:16,579 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:11:16,580 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:11:16,582 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:16,582 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:16,582 INFO L794 eck$LassoCheckResult]: Stem: 7090081#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 7090082#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 7091373#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 7091709#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 7087881#L2596 assume 0 != main_~tmp~26; 7087882#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 7085776#L2178 assume !(0 == getOrigin_~person); 7085558#L2182 assume !(1 == getOrigin_~person); 7084992#L2186 assume !(2 == getOrigin_~person); 7084993#L2190 assume !(3 == getOrigin_~person); 7086696#L2194 assume !(4 == getOrigin_~person); 7086697#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 7091223#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7088453#L2963 assume 0 == initPersonOnFloor_~floor; 7088455#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7085357#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7086914#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7089895#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7090346#L2692 assume !(0 == isFloorCalling_~floorID); 7088851#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7085953#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7092110#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7092111#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7092103#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7092104#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7092142#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7095378#L1105 assume !(0 != timeShift_~tmp___9~2); 7095377#L1196 assume !(1 == ~doorState~0); 7095376#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7092174#L2692-3 assume !(0 == isFloorCalling_~floorID); 7092171#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7092170#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7092161#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7092162#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7090245#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7090246#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7095579#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7095580#L892 assume !(1 == ~currentHeading~0); 7095868#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7095862#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7095860#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7094755#L2692-25 assume !(0 == isFloorCalling_~floorID); 7089070#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7085856#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7085112#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7085113#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7089904#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7094067#L2692-26 assume !(0 == isFloorCalling_~floorID); 7099727#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7105728#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7105723#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7105713#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7105706#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7105699#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7105692#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7105674#L1105-1 assume !(0 != timeShift_~tmp___9~2); 7105596#L1196-3 assume !(1 == ~doorState~0); 7105573#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7105571#L2692-29 assume !(0 == isFloorCalling_~floorID); 7105572#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7107591#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7107590#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7107588#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7107586#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7107575#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7107566#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7107567#L892-3 assume !(1 == ~currentHeading~0); 7110117#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7108461#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7104974#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7104972#L2692-51 assume !(0 == isFloorCalling_~floorID); 7104970#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7104961#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7104941#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7104937#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7103994#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7103992#L2692-52 assume !(0 == isFloorCalling_~floorID); 7103989#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7103986#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7103984#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7103980#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7103974#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7103959#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7103954#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7103936#L1105-2 assume !(0 != timeShift_~tmp___9~2); 7103920#L1196-6 assume !(1 == ~doorState~0); 7103785#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7103783#L2692-55 assume !(0 == isFloorCalling_~floorID); 7103784#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7104797#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7104792#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7104793#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7107568#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7107380#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7107377#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7107378#L892-6 assume !(1 == ~currentHeading~0); 7114285#L902-18 assume !(0 == ~currentFloorID~0); 7114274#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7101225#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7101222#L2692-77 assume !(0 == isFloorCalling_~floorID); 7101224#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7149096#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7149095#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7149090#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7149088#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 7149086#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 7149081#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7149080#L2963-1 assume 0 == initPersonOnFloor_~floor; 7149051#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7100855#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7100856#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7144949#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7144947#L2692-78 assume !(0 == isFloorCalling_~floorID); 7118365#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7118361#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7118352#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7118353#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7118342#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7118343#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7155535#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7155536#L1105-3 assume !(0 != timeShift_~tmp___9~2); 7155524#L1196-9 assume !(1 == ~doorState~0); 7155525#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7092666#L2692-81 assume !(0 == isFloorCalling_~floorID); 7092668#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7178362#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7178363#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7178354#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7178355#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7185991#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7185988#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7185989#L892-9 assume !(1 == ~currentHeading~0); 7199579#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7091717#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7090031#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7196752#L2692-103 assume !(0 == isFloorCalling_~floorID); 7196753#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7202103#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7202098#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7202081#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7202078#L1687-7 cleanup_~i~3 := 0; 7202076#L2405-2 assume !false; 7202077#L2406 [2019-12-07 10:11:16,583 INFO L796 eck$LassoCheckResult]: Loop: 7202077#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 7253545#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 7253544#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 7253543#L2413 assume 1 != cleanup_~tmp___0~11; 7253542#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7253540#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7253541#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 7253495#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 7253479#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 7253478#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 7157629#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7157630#L2692-109 assume !(0 == isFloorCalling_~floorID); 7225569#L2696-109 assume !(1 == isFloorCalling_~floorID); 7225570#L2700-109 assume !(2 == isFloorCalling_~floorID); 7225573#L2704-109 assume !(3 == isFloorCalling_~floorID); 7225574#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7246394#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7251016#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7251015#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7251014#L2692-111 assume !(0 == isFloorCalling_~floorID); 7246383#L2696-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7246378#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 7246374#L925-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 7246375#L300-9 assume !(0 == buttonForFloorIsPressed_~floorID); 7246390#L304-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 7246385#L321-9 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24; 7246376#L932-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 7246377#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7251752#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7251751#L1105-4 assume !(0 != timeShift_~tmp___9~2); 7251750#L1196-12 assume !(1 == ~doorState~0); 7251722#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7251721#L2692-112 assume !(0 == isFloorCalling_~floorID); 7251720#L2696-112 assume !(1 == isFloorCalling_~floorID); 7251719#L2700-112 assume !(2 == isFloorCalling_~floorID); 7251718#L2704-112 assume !(3 == isFloorCalling_~floorID); 7251716#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7251715#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7251714#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7251713#L835-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret8, stopRequestedInDirection__wrappee__weight_#t~ret9, stopRequestedInDirection__wrappee__weight_#t~ret10, stopRequestedInDirection__wrappee__weight_#t~ret11, stopRequestedInDirection__wrappee__weight_#t~ret12, stopRequestedInDirection__wrappee__weight_#t~ret13, stopRequestedInDirection__wrappee__weight_#t~ret14, stopRequestedInDirection__wrappee__weight_#t~ret15, stopRequestedInDirection__wrappee__weight_#t~ret16, stopRequestedInDirection__wrappee__weight_#t~ret17, stopRequestedInDirection__wrappee__weight_#t~ret18, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~8, stopRequestedInDirection__wrappee__weight_~tmp~4, stopRequestedInDirection__wrappee__weight_~tmp___0~1, stopRequestedInDirection__wrappee__weight_~tmp___1~1, stopRequestedInDirection__wrappee__weight_~tmp___2~1, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__weight_~tmp~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 7251711#L487-8 assume 1 == stopRequestedInDirection__wrappee__weight_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~29;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~29;isTopFloor_~retValue_acc~29 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~29; 7251710#L3266-20 stopRequestedInDirection__wrappee__weight_#t~ret8 := isTopFloor_#res;stopRequestedInDirection__wrappee__weight_~tmp~4 := stopRequestedInDirection__wrappee__weight_#t~ret8;havoc stopRequestedInDirection__wrappee__weight_#t~ret8; 7251690#L491-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~4;stopRequestedInDirection__wrappee__weight_~retValue_acc~8 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~8; 7251363#L809-8 stopRequestedInDirection_#t~ret21 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7251675#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7251664#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7251665#L892-12 assume !(1 == ~currentHeading~0); 7253603#L902-36 assume !(0 == ~currentFloorID~0); 7251228#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7248536#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7248535#L2692-134 assume !(0 == isFloorCalling_~floorID); 7248534#L2696-134 assume !(1 == isFloorCalling_~floorID); 7247997#L2700-134 assume !(2 == isFloorCalling_~floorID); 7247998#L2704-134 assume !(3 == isFloorCalling_~floorID); 7248001#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7248002#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7253553#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7253549#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7253547#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 7253546#L2405-2 assume !false; 7202077#L2406 [2019-12-07 10:11:16,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:16,583 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 5 times [2019-12-07 10:11:16,583 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:16,583 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1259100419] [2019-12-07 10:11:16,583 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:16,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:16,630 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:16,630 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1259100419] [2019-12-07 10:11:16,630 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:16,630 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:11:16,630 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [121408354] [2019-12-07 10:11:16,630 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:11:16,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:16,631 INFO L82 PathProgramCache]: Analyzing trace with hash 1305801194, now seen corresponding path program 1 times [2019-12-07 10:11:16,631 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:16,631 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1198486032] [2019-12-07 10:11:16,631 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:16,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:16,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:16,647 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1198486032] [2019-12-07 10:11:16,647 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:16,647 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 10:11:16,648 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [547356115] [2019-12-07 10:11:16,648 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:11:16,648 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:11:16,648 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 10:11:16,648 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 10:11:16,648 INFO L87 Difference]: Start difference. First operand 197219 states and 351872 transitions. cyclomatic complexity: 154729 Second operand 5 states. [2019-12-07 10:11:18,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:11:18,472 INFO L93 Difference]: Finished difference Result 485994 states and 861918 transitions. [2019-12-07 10:11:18,473 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 10:11:18,473 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 485994 states and 861918 transitions. [2019-12-07 10:11:20,096 INFO L131 ngComponentsAnalysis]: Automaton has 112 accepting balls. 171085 [2019-12-07 10:11:21,803 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 485994 states to 485994 states and 861918 transitions. [2019-12-07 10:11:21,803 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 364582 [2019-12-07 10:11:21,974 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 364582 [2019-12-07 10:11:21,974 INFO L73 IsDeterministic]: Start isDeterministic. Operand 485994 states and 861918 transitions. [2019-12-07 10:11:21,993 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:11:21,994 INFO L688 BuchiCegarLoop]: Abstraction has 485994 states and 861918 transitions. [2019-12-07 10:11:22,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 485994 states and 861918 transitions. [2019-12-07 10:11:24,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 485994 to 197724. [2019-12-07 10:11:24,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 197724 states. [2019-12-07 10:11:24,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197724 states to 197724 states and 352346 transitions. [2019-12-07 10:11:24,458 INFO L711 BuchiCegarLoop]: Abstraction has 197724 states and 352346 transitions. [2019-12-07 10:11:24,458 INFO L591 BuchiCegarLoop]: Abstraction has 197724 states and 352346 transitions. [2019-12-07 10:11:24,458 INFO L424 BuchiCegarLoop]: ======== Iteration 18============ [2019-12-07 10:11:24,458 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 197724 states and 352346 transitions. [2019-12-07 10:11:25,115 INFO L131 ngComponentsAnalysis]: Automaton has 48 accepting balls. 64129 [2019-12-07 10:11:25,116 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:11:25,116 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:11:25,117 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:25,118 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:25,118 INFO L794 eck$LassoCheckResult]: Stem: 7773490#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 7773491#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 7774862#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 7775234#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 7771259#L2596 assume 0 != main_~tmp~26; 7771260#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 7769013#L2178 assume !(0 == getOrigin_~person); 7768790#L2182 assume !(1 == getOrigin_~person); 7768229#L2186 assume !(2 == getOrigin_~person); 7768230#L2190 assume !(3 == getOrigin_~person); 7770002#L2194 assume !(4 == getOrigin_~person); 7770003#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 7774690#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7771855#L2963 assume 0 == initPersonOnFloor_~floor; 7771857#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7768597#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7770253#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7773293#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7770542#L2692 assume !(0 == isFloorCalling_~floorID); 7770543#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7769195#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7775693#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7775689#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7775677#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7775678#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7775688#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7775791#L1105 assume !(0 != timeShift_~tmp___9~2); 7775793#L1196 assume !(1 == ~doorState~0); 7785764#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7785763#L2692-3 assume !(0 == isFloorCalling_~floorID); 7772264#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7769426#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7778747#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7778748#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7778661#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7778662#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7778652#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7778653#L892 assume !(1 == ~currentHeading~0); 7773540#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7773541#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7906631#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7906630#L2692-25 assume !(0 == isFloorCalling_~floorID); 7772473#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7769095#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7785651#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7785652#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7839452#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7839448#L2692-26 assume !(0 == isFloorCalling_~floorID); 7839449#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7891516#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7891515#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7891513#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7891512#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7891509#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7891510#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7912639#L1105-1 assume !(0 != timeShift_~tmp___9~2); 7912637#L1196-3 assume !(1 == ~doorState~0); 7912634#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7912628#L2692-29 assume !(0 == isFloorCalling_~floorID); 7912608#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7912602#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7912601#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7912599#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7912595#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7912254#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7912248#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7912167#L892-3 assume !(1 == ~currentHeading~0); 7912097#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7912095#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7912054#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7912047#L2692-51 assume !(0 == isFloorCalling_~floorID); 7912039#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7911989#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7911971#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7911555#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7891027#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7891028#L2692-52 assume !(0 == isFloorCalling_~floorID); 7894696#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7894692#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7894690#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7894685#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7894683#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7894680#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7894678#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7894677#L1105-2 assume !(0 != timeShift_~tmp___9~2); 7894674#L1196-6 assume !(1 == ~doorState~0); 7894670#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7894667#L2692-55 assume !(0 == isFloorCalling_~floorID); 7894660#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7894645#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7894634#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7894627#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7894320#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7894250#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7894168#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7894164#L892-6 assume !(1 == ~currentHeading~0); 7894088#L902-18 assume !(0 == ~currentFloorID~0); 7893296#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7893290#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7893288#L2692-77 assume !(0 == isFloorCalling_~floorID); 7893284#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7893283#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7893282#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7893277#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7893275#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 7893273#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 7893268#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7893267#L2963-1 assume 0 == initPersonOnFloor_~floor; 7893237#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 7893232#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 7891605#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7869860#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7869858#L2692-78 assume !(0 == isFloorCalling_~floorID); 7869857#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7869852#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7869851#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7869849#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7869848#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 7869845#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7869846#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7902270#L1105-3 assume !(0 != timeShift_~tmp___9~2); 7901965#L1196-9 assume !(1 == ~doorState~0); 7901962#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7901960#L2692-81 assume !(0 == isFloorCalling_~floorID); 7901958#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7901955#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7901953#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7901946#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 7901879#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7901878#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7901876#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7901873#L892-9 assume !(1 == ~currentHeading~0); 7901874#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7901867#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7901862#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7913680#L2692-103 assume !(0 == isFloorCalling_~floorID); 7913679#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7912653#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7912642#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7912078#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7912052#L1687-7 cleanup_~i~3 := 0; 7912045#L2405-2 assume !false; 7910847#L2406 [2019-12-07 10:11:25,118 INFO L796 eck$LassoCheckResult]: Loop: 7910847#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 7910845#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 7910827#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 7910567#L2413 assume 1 != cleanup_~tmp___0~11; 7910407#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7877952#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7877953#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 7877868#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 7877858#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 7877856#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 7845766#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7845761#L2692-109 assume !(0 == isFloorCalling_~floorID); 7806686#L2696-109 assume !(1 == isFloorCalling_~floorID); 7806687#L2700-109 assume !(2 == isFloorCalling_~floorID); 7806688#L2704-109 assume !(3 == isFloorCalling_~floorID); 7806684#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7806685#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7898505#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 7898504#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7898503#L2692-111 assume !(0 == isFloorCalling_~floorID); 7816311#L2696-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7816306#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 7816304#L925-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 7812361#L300-9 assume !(0 == buttonForFloorIsPressed_~floorID); 7811611#L304-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 7811606#L321-9 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24; 7811603#L932-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 7811602#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 7811601#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 7811159#L1105-4 assume !(0 != timeShift_~tmp___9~2); 7811152#L1196-12 assume !(1 == ~doorState~0); 7811150#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7811148#L2692-112 assume !(0 == isFloorCalling_~floorID); 7811147#L2696-112 assume !(1 == isFloorCalling_~floorID); 7811146#L2700-112 assume !(2 == isFloorCalling_~floorID); 7811119#L2704-112 assume !(3 == isFloorCalling_~floorID); 7811120#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7811121#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7819399#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 7819326#L835-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret8, stopRequestedInDirection__wrappee__weight_#t~ret9, stopRequestedInDirection__wrappee__weight_#t~ret10, stopRequestedInDirection__wrappee__weight_#t~ret11, stopRequestedInDirection__wrappee__weight_#t~ret12, stopRequestedInDirection__wrappee__weight_#t~ret13, stopRequestedInDirection__wrappee__weight_#t~ret14, stopRequestedInDirection__wrappee__weight_#t~ret15, stopRequestedInDirection__wrappee__weight_#t~ret16, stopRequestedInDirection__wrappee__weight_#t~ret17, stopRequestedInDirection__wrappee__weight_#t~ret18, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~8, stopRequestedInDirection__wrappee__weight_~tmp~4, stopRequestedInDirection__wrappee__weight_~tmp___0~1, stopRequestedInDirection__wrappee__weight_~tmp___1~1, stopRequestedInDirection__wrappee__weight_~tmp___2~1, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__weight_~tmp~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 7819322#L487-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 7819323#L656-8 assume !(0 == ~currentFloorID~0); 7819368#L662-8 assume !(~currentFloorID~0 > 0); 7819254#L677-8 assume ~currentFloorID~0 > 0; 7819267#L679-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 7819229#L680-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~8; 7819227#L809-8 stopRequestedInDirection_#t~ret21 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 7819148#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 7819149#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 7916823#L892-12 assume !(1 == ~currentHeading~0); 7916820#L902-36 assume !(0 == ~currentFloorID~0); 7916416#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7916408#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 7916405#L2692-134 assume !(0 == isFloorCalling_~floorID); 7916401#L2696-134 assume !(1 == isFloorCalling_~floorID); 7916399#L2700-134 assume !(2 == isFloorCalling_~floorID); 7914264#L2704-134 assume !(3 == isFloorCalling_~floorID); 7914257#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 7914040#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 7913957#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 7913950#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 7913948#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 7911424#L2405-2 assume !false; 7910847#L2406 [2019-12-07 10:11:25,119 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:25,119 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 6 times [2019-12-07 10:11:25,119 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:25,119 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1097119991] [2019-12-07 10:11:25,119 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:25,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:25,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:25,163 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1097119991] [2019-12-07 10:11:25,163 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:25,163 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:11:25,163 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1957273748] [2019-12-07 10:11:25,164 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:11:25,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:25,164 INFO L82 PathProgramCache]: Analyzing trace with hash -1422380539, now seen corresponding path program 1 times [2019-12-07 10:11:25,164 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:25,164 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1761731547] [2019-12-07 10:11:25,164 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:25,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:25,199 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:25,199 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1761731547] [2019-12-07 10:11:25,199 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:25,199 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 10:11:25,199 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1709999570] [2019-12-07 10:11:25,199 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:11:25,199 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:11:25,199 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 10:11:25,200 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 10:11:25,200 INFO L87 Difference]: Start difference. First operand 197724 states and 352346 transitions. cyclomatic complexity: 154698 Second operand 4 states. [2019-12-07 10:11:28,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:11:28,375 INFO L93 Difference]: Finished difference Result 341011 states and 605840 transitions. [2019-12-07 10:11:28,376 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 10:11:28,376 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 341011 states and 605840 transitions. [2019-12-07 10:11:29,468 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 107805 [2019-12-07 10:11:30,645 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 341011 states to 340819 states and 605648 transitions. [2019-12-07 10:11:30,646 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 257417 [2019-12-07 10:11:30,774 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 257417 [2019-12-07 10:11:30,775 INFO L73 IsDeterministic]: Start isDeterministic. Operand 340819 states and 605648 transitions. [2019-12-07 10:11:30,809 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:11:30,809 INFO L688 BuchiCegarLoop]: Abstraction has 340819 states and 605648 transitions. [2019-12-07 10:11:30,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 340819 states and 605648 transitions. [2019-12-07 10:11:32,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 340819 to 271864. [2019-12-07 10:11:32,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 271864 states. [2019-12-07 10:11:33,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271864 states to 271864 states and 482032 transitions. [2019-12-07 10:11:33,208 INFO L711 BuchiCegarLoop]: Abstraction has 271864 states and 482032 transitions. [2019-12-07 10:11:33,209 INFO L591 BuchiCegarLoop]: Abstraction has 271864 states and 482032 transitions. [2019-12-07 10:11:33,209 INFO L424 BuchiCegarLoop]: ======== Iteration 19============ [2019-12-07 10:11:33,209 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 271864 states and 482032 transitions. [2019-12-07 10:11:33,851 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 89511 [2019-12-07 10:11:33,851 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:11:33,851 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:11:33,853 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:33,853 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:33,853 INFO L794 eck$LassoCheckResult]: Stem: 8312232#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 8312233#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 8313647#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 8314080#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 8310009#L2596 assume 0 != main_~tmp~26; 8310010#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 8307761#L2178 assume !(0 == getOrigin_~person); 8307537#L2182 assume !(1 == getOrigin_~person); 8306973#L2186 assume !(2 == getOrigin_~person); 8306974#L2190 assume !(3 == getOrigin_~person); 8308726#L2194 assume !(4 == getOrigin_~person); 8308727#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 8313479#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 8310592#L2963 assume 0 == initPersonOnFloor_~floor; 8310594#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8307332#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8308967#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8312027#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8309289#L2692 assume !(0 == isFloorCalling_~floorID); 8309291#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8307941#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8314582#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 8314583#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8314557#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8314558#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8314726#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 8318610#L1105 assume !(0 != timeShift_~tmp___9~2); 8318609#L1196 assume !(1 == ~doorState~0); 8318608#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8314749#L2692-3 assume !(0 == isFloorCalling_~floorID); 8314751#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8318575#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8318574#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 8318573#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8314763#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8314764#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 8314758#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 8314566#L892 assume !(1 == ~currentHeading~0); 8314567#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8320899#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8320898#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8320866#L2692-25 assume !(0 == isFloorCalling_~floorID); 8320867#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8319118#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8319119#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 8318395#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 8318396#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8318359#L2692-26 assume !(0 == isFloorCalling_~floorID); 8318361#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8322734#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8322733#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 8322732#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8322731#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8322730#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8322727#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 8322724#L1105-1 assume !(0 != timeShift_~tmp___9~2); 8322722#L1196-3 assume !(1 == ~doorState~0); 8322719#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8322716#L2692-29 assume !(0 == isFloorCalling_~floorID); 8322714#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8322686#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8322681#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 8322630#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8322438#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8322436#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 8322432#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 8322433#L892-3 assume !(1 == ~currentHeading~0); 8322167#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8322156#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8322144#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8322145#L2692-51 assume !(0 == isFloorCalling_~floorID); 8338511#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8338503#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8338502#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 8338490#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 8338487#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8338483#L2692-52 assume !(0 == isFloorCalling_~floorID); 8338476#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8338472#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8338470#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 8338467#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8338465#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8338461#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8338460#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 8338457#L1105-2 assume !(0 != timeShift_~tmp___9~2); 8338455#L1196-6 assume !(1 == ~doorState~0); 8338454#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8338451#L2692-55 assume !(0 == isFloorCalling_~floorID); 8338448#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8338442#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8338691#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 8338283#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8338155#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8338143#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 8338132#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 8338117#L892-6 assume !(1 == ~currentHeading~0); 8338106#L902-18 assume !(0 == ~currentFloorID~0); 8338095#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8338084#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8338085#L2692-77 assume !(0 == isFloorCalling_~floorID); 8338075#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8338076#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8338062#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 8338063#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 8338049#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 8338050#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 8338011#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 8338012#L2963-1 assume 0 == initPersonOnFloor_~floor; 8337949#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 8337945#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8337933#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8337927#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8337921#L2692-78 assume !(0 == isFloorCalling_~floorID); 8337923#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8380494#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8380485#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 8380482#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8380477#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 8380472#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8380473#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 8380468#L1105-3 assume !(0 != timeShift_~tmp___9~2); 8380470#L1196-9 assume !(1 == ~doorState~0); 8380465#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8380463#L2692-81 assume !(0 == isFloorCalling_~floorID); 8380464#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8416955#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8416954#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 8416952#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 8416953#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8384237#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 8384238#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 8385573#L892-9 assume !(1 == ~currentHeading~0); 8385568#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8314089#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8411541#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8411539#L2692-103 assume !(0 == isFloorCalling_~floorID); 8411538#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8411534#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8411533#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 8411528#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 8411526#L1687-7 cleanup_~i~3 := 0; 8411518#L2405-2 assume !false; 8411519#L2406 [2019-12-07 10:11:33,854 INFO L796 eck$LassoCheckResult]: Loop: 8411519#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 8502086#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 8502085#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 8502084#L2413 assume 1 != cleanup_~tmp___0~11; 8502083#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8502081#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8502082#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 8502051#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 8502045#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 8502038#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 8502037#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8502035#L2692-109 assume !(0 == isFloorCalling_~floorID); 8502034#L2696-109 assume !(1 == isFloorCalling_~floorID); 8502033#L2700-109 assume !(2 == isFloorCalling_~floorID); 8502032#L2704-109 assume !(3 == isFloorCalling_~floorID); 8502030#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8502024#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8502022#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 8502021#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8502019#L2692-111 assume !(0 == isFloorCalling_~floorID); 8502020#L2696-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8530288#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 8530284#L925-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 8530285#L300-9 assume !(0 == buttonForFloorIsPressed_~floorID); 8530298#L304-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 8530289#L321-9 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24; 8530286#L932-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 8530287#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 8546606#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 8546605#L1105-4 assume !(0 != timeShift_~tmp___9~2); 8546604#L1196-12 assume !(1 == ~doorState~0); 8546603#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8546601#L2692-112 assume !(0 == isFloorCalling_~floorID); 8546600#L2696-112 assume !(1 == isFloorCalling_~floorID); 8546599#L2700-112 assume !(2 == isFloorCalling_~floorID); 8546598#L2704-112 assume !(3 == isFloorCalling_~floorID); 8546595#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8546593#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8546591#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 8546589#L835-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret8, stopRequestedInDirection__wrappee__weight_#t~ret9, stopRequestedInDirection__wrappee__weight_#t~ret10, stopRequestedInDirection__wrappee__weight_#t~ret11, stopRequestedInDirection__wrappee__weight_#t~ret12, stopRequestedInDirection__wrappee__weight_#t~ret13, stopRequestedInDirection__wrappee__weight_#t~ret14, stopRequestedInDirection__wrappee__weight_#t~ret15, stopRequestedInDirection__wrappee__weight_#t~ret16, stopRequestedInDirection__wrappee__weight_#t~ret17, stopRequestedInDirection__wrappee__weight_#t~ret18, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~8, stopRequestedInDirection__wrappee__weight_~tmp~4, stopRequestedInDirection__wrappee__weight_~tmp___0~1, stopRequestedInDirection__wrappee__weight_~tmp___1~1, stopRequestedInDirection__wrappee__weight_~tmp___2~1, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__weight_~tmp~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 8546586#L487-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 8546587#L656-8 assume !(0 == ~currentFloorID~0); 8546610#L662-8 assume ~currentFloorID~0 > 0; 8546608#L663-8 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 8483327#L677-8 assume ~currentFloorID~0 > 0; 8546564#L679-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 8546543#L680-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~8; 8546539#L809-8 stopRequestedInDirection_#t~ret21 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 8546401#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 8546402#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 8548141#L892-12 assume !(1 == ~currentHeading~0); 8548137#L902-36 assume !(0 == ~currentFloorID~0); 8521406#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8502109#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 8502107#L2692-134 assume !(0 == isFloorCalling_~floorID); 8502106#L2696-134 assume !(1 == isFloorCalling_~floorID); 8502101#L2700-134 assume !(2 == isFloorCalling_~floorID); 8502099#L2704-134 assume !(3 == isFloorCalling_~floorID); 8502097#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 8502096#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 8502095#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 8502090#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 8502088#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 8502087#L2405-2 assume !false; 8411519#L2406 [2019-12-07 10:11:33,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:33,854 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 7 times [2019-12-07 10:11:33,854 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:33,854 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [789943037] [2019-12-07 10:11:33,854 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:33,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:33,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:33,895 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [789943037] [2019-12-07 10:11:33,896 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:33,896 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:11:33,896 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499115151] [2019-12-07 10:11:33,896 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:11:33,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:33,896 INFO L82 PathProgramCache]: Analyzing trace with hash 1184845970, now seen corresponding path program 1 times [2019-12-07 10:11:33,896 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:33,896 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1900922551] [2019-12-07 10:11:33,896 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:33,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:33,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:33,918 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1900922551] [2019-12-07 10:11:33,918 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:33,918 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:11:33,918 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2087302094] [2019-12-07 10:11:33,918 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 10:11:33,918 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:11:33,919 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 10:11:33,919 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 10:11:33,919 INFO L87 Difference]: Start difference. First operand 271864 states and 482032 transitions. cyclomatic complexity: 210267 Second operand 6 states. [2019-12-07 10:11:35,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:11:35,478 INFO L93 Difference]: Finished difference Result 474315 states and 837414 transitions. [2019-12-07 10:11:35,479 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 10:11:35,479 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 474315 states and 837414 transitions. [2019-12-07 10:11:37,481 INFO L131 ngComponentsAnalysis]: Automaton has 118 accepting balls. 164024 [2019-12-07 10:11:38,580 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 474315 states to 474315 states and 837414 transitions. [2019-12-07 10:11:38,580 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 355483 [2019-12-07 10:11:38,789 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 355483 [2019-12-07 10:11:38,789 INFO L73 IsDeterministic]: Start isDeterministic. Operand 474315 states and 837414 transitions. [2019-12-07 10:11:38,837 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2019-12-07 10:11:38,837 INFO L688 BuchiCegarLoop]: Abstraction has 474315 states and 837414 transitions. [2019-12-07 10:11:39,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 474315 states and 837414 transitions. [2019-12-07 10:11:45,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 474315 to 271864. [2019-12-07 10:11:45,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 271864 states. [2019-12-07 10:11:46,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271864 states to 271864 states and 479136 transitions. [2019-12-07 10:11:46,209 INFO L711 BuchiCegarLoop]: Abstraction has 271864 states and 479136 transitions. [2019-12-07 10:11:46,209 INFO L591 BuchiCegarLoop]: Abstraction has 271864 states and 479136 transitions. [2019-12-07 10:11:46,209 INFO L424 BuchiCegarLoop]: ======== Iteration 20============ [2019-12-07 10:11:46,209 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 271864 states and 479136 transitions. [2019-12-07 10:11:46,761 INFO L131 ngComponentsAnalysis]: Automaton has 62 accepting balls. 89511 [2019-12-07 10:11:46,761 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 10:11:46,761 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 10:11:46,763 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:46,763 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 10:11:46,764 INFO L794 eck$LassoCheckResult]: Stem: 9058480#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(10);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string54.base, #t~string54.offset, 1);call write~init~int(95, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(93, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string56.base, #t~string56.offset, 1);call write~init~int(93, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 2 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 3 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string58.base, #t~string58.offset, 1);call write~init~int(97, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(116, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(32, #t~string58.base, 3 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 4 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string60.base, #t~string60.offset, 1);call write~init~int(105, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 2 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(10);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string64.base, #t~string64.offset, 1);call write~init~int(112, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string66.base, #t~string66.offset, 1);call write~init~int(111, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(119, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(110, #t~string66.base, 3 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 4 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string68.base, #t~string68.offset, 1);call write~init~int(73, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(76, #t~string68.base, 2 + #t~string68.offset, 1);call write~init~int(95, #t~string68.base, 3 + #t~string68.offset, 1);call write~init~int(112, #t~string68.base, 4 + #t~string68.offset, 1);call write~init~int(58, #t~string68.base, 5 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 6 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string70.base, #t~string70.offset, 1);call write~init~int(37, #t~string70.base, 1 + #t~string70.offset, 1);call write~init~int(105, #t~string70.base, 2 + #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 3 + #t~string70.offset, 1);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string72.base, #t~string72.offset, 1);call write~init~int(37, #t~string72.base, 1 + #t~string72.offset, 1);call write~init~int(105, #t~string72.base, 2 + #t~string72.offset, 1);call write~init~int(0, #t~string72.base, 3 + #t~string72.offset, 1);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string74.base, #t~string74.offset, 1);call write~init~int(37, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(105, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string76.base, #t~string76.offset, 1);call write~init~int(37, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(105, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(37, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(105, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 3 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string80.base, #t~string80.offset, 1);call write~init~int(70, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(95, #t~string80.base, 2 + #t~string80.offset, 1);call write~init~int(112, #t~string80.base, 3 + #t~string80.offset, 1);call write~init~int(58, #t~string80.base, 4 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 5 + #t~string80.offset, 1);call #t~string83.base, #t~string83.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string83.base, #t~string83.offset, 1);call write~init~int(37, #t~string83.base, 1 + #t~string83.offset, 1);call write~init~int(105, #t~string83.base, 2 + #t~string83.offset, 1);call write~init~int(0, #t~string83.base, 3 + #t~string83.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string86.base, #t~string86.offset, 1);call write~init~int(37, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(105, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 3 + #t~string86.offset, 1);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string89.base, #t~string89.offset, 1);call write~init~int(37, #t~string89.base, 1 + #t~string89.offset, 1);call write~init~int(105, #t~string89.base, 2 + #t~string89.offset, 1);call write~init~int(0, #t~string89.base, 3 + #t~string89.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string95.base, #t~string95.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string95.base, #t~string95.offset, 1);call write~init~int(37, #t~string95.base, 1 + #t~string95.offset, 1);call write~init~int(105, #t~string95.base, 2 + #t~string95.offset, 1);call write~init~int(0, #t~string95.base, 3 + #t~string95.offset, 1);call #t~string97.base, #t~string97.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string97.base, #t~string97.offset, 1);call write~init~int(0, #t~string97.base, 1 + #t~string97.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(30);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(9);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(21);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(30);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(9);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(21);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(30);call #t~string138.base, #t~string138.offset := #Ultimate.allocOnStack(9);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(25);call #t~string140.base, #t~string140.offset := #Ultimate.allocOnStack(30);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(9);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 9058481#L-1 havoc main_#res;havoc main_#t~ret159, main_~retValue_acc~26, main_~tmp~26;havoc main_~retValue_acc~26;havoc main_~tmp~26; 9059910#L2122 havoc valid_product_#res;havoc valid_product_~retValue_acc~21;havoc valid_product_~retValue_acc~21;valid_product_~retValue_acc~21 := 1;valid_product_#res := valid_product_~retValue_acc~21; 9060354#L2130 main_#t~ret159 := valid_product_#res;main_~tmp~26 := main_#t~ret159;havoc main_#t~ret159; 9056226#L2596 assume 0 != main_~tmp~26; 9056227#L2573 havoc bigMacCall_#t~ret152, bigMacCall_~tmp~23;havoc bigMacCall_~tmp~23;getOrigin_#in~person := 5;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 9053971#L2178 assume !(0 == getOrigin_~person); 9053745#L2182 assume !(1 == getOrigin_~person); 9053180#L2186 assume !(2 == getOrigin_~person); 9053181#L2190 assume !(3 == getOrigin_~person); 9054954#L2194 assume !(4 == getOrigin_~person); 9054955#L2198 assume 5 == getOrigin_~person;getOrigin_~retValue_acc~23 := 1;getOrigin_#res := getOrigin_~retValue_acc~23; 9059741#L2203 bigMacCall_#t~ret152 := getOrigin_#res;bigMacCall_~tmp~23 := bigMacCall_#t~ret152;havoc bigMacCall_#t~ret152;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 5, bigMacCall_~tmp~23;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9056829#L2963 assume 0 == initPersonOnFloor_~floor; 9056831#L2964 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 9053538#L3071-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9055203#L2755 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9058272#L2767-2 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9055526#L2692 assume !(0 == isFloorCalling_~floorID); 9055528#L2696 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9054157#L2719 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9060872#L1568 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 9060873#L952 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9060854#L283 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9060855#L956 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9060912#L969 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 9060964#L1105 assume !(0 != timeShift_~tmp___9~2); 9062698#L1196 assume !(1 == ~doorState~0); 9060958#L1196-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9060959#L2692-3 assume !(0 == isFloorCalling_~floorID); 9060953#L2696-3 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9060951#L2719-3 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9061852#L1568-1 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 9061845#L835 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9061846#L283-1 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9061530#L848 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 9061531#L1204 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 9062718#L892 assume !(1 == ~currentHeading~0); 9062712#L902 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9062073#L902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 9062072#L908-5 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9068259#L2692-25 assume !(0 == isFloorCalling_~floorID); 9068255#L2696-25 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9068253#L2719-25 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9068252#L1568-3 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 9062052#L1687 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 9062053#L1687-1 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9065278#L2692-26 assume !(0 == isFloorCalling_~floorID); 9065279#L2696-26 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9068271#L2719-26 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9068272#L1568-4 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 9065330#L952-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9065331#L283-4 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9062043#L956-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9062044#L969-1 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 9073444#L1105-1 assume !(0 != timeShift_~tmp___9~2); 9073443#L1196-3 assume !(1 == ~doorState~0); 9073442#L1196-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9073441#L2692-29 assume !(0 == isFloorCalling_~floorID); 9068509#L2696-29 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9068506#L2719-29 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9068503#L1568-5 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 9068504#L835-2 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9073036#L283-5 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9072558#L848-2 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 9072278#L1204-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 9072252#L892-3 assume !(1 == ~currentHeading~0); 9072243#L902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9072232#L902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9072221#L908-11 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9072222#L2692-51 assume !(0 == isFloorCalling_~floorID); 9072216#L2696-51 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9072214#L2719-51 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9072209#L1568-7 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 9072210#L1687-2 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 9081936#L1687-3 havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9081935#L2692-52 assume !(0 == isFloorCalling_~floorID); 9081928#L2696-52 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9081923#L2719-52 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9081914#L1568-8 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 9081911#L952-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9081909#L283-8 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9081879#L956-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9081881#L969-2 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 9106192#L1105-2 assume !(0 != timeShift_~tmp___9~2); 9106191#L1196-6 assume !(1 == ~doorState~0); 9106190#L1196-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9106189#L2692-55 assume !(0 == isFloorCalling_~floorID); 9106188#L2696-55 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9081845#L2719-55 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9081846#L1568-9 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 9106076#L835-4 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9081766#L283-9 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9081767#L848-4 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 9105222#L1204-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 9105223#L892-6 assume !(1 == ~currentHeading~0); 9107942#L902-18 assume !(0 == ~currentFloorID~0); 9105797#L902-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9105788#L908-17 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9105786#L2692-77 assume !(0 == isFloorCalling_~floorID); 9105782#L2696-77 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9105781#L2719-77 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9105780#L1568-11 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 9105775#L1687-4 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 9105773#L1687-5 havoc bobCall_#t~ret147, bobCall_~tmp~18;havoc bobCall_~tmp~18;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~23;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~23; 9104355#L2178-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~23 := 4;getOrigin_#res := getOrigin_~retValue_acc~23; 9104350#L2203-1 bobCall_#t~ret147 := getOrigin_#res;bobCall_~tmp~18 := bobCall_#t~ret147;havoc bobCall_#t~ret147;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~18;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 9104347#L2963-1 assume 0 == initPersonOnFloor_~floor; 9104348#L2964-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 9118205#L3071-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 9118204#L2755-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 9118061#L2767-5 havoc cleanup_#t~ret153, cleanup_#t~ret154, cleanup_~i~3, cleanup_~tmp~24, cleanup_~tmp___0~11, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~24;havoc cleanup_~tmp___0~11;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9118198#L2692-78 assume !(0 == isFloorCalling_~floorID); 9104300#L2696-78 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9104290#L2719-78 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9104291#L1568-12 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 9118120#L952-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~8;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9118118#L283-12 stopRequestedAtCurrentFloor_#t~ret26 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 9118102#L956-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9118098#L969-3 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 9118096#L1105-3 assume !(0 != timeShift_~tmp___9~2); 9118095#L1196-9 assume !(1 == ~doorState~0); 9118094#L1196-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9104231#L2692-81 assume !(0 == isFloorCalling_~floorID); 9104233#L2696-81 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9118007#L2719-81 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9118010#L1568-13 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 9118000#L835-6 assume 0 != stopRequestedInDirection_~tmp___0~2;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 9118001#L283-13 stopRequestedInDirection_#t~ret20 := getCurrentFloorID_#res;stopRequestedInDirection_~tmp~5 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~5 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9151002#L848-6 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 9151001#L1204-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 9150797#L892-9 assume !(1 == ~currentHeading~0); 9150788#L902-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 9150784#L902-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9150779#L908-23 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9177606#L2692-103 assume !(0 == isFloorCalling_~floorID); 9177605#L2696-103 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9177601#L2719-103 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9177599#L1568-15 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 9177595#L1687-6 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 9177592#L1687-7 cleanup_~i~3 := 0; 9177588#L2405-2 assume !false; 9177589#L2406 [2019-12-07 10:11:46,764 INFO L796 eck$LassoCheckResult]: Loop: 9177589#L2406 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 9270777#L2409 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 9251189#L130 cleanup_#t~ret153 := isBlocked_#res;cleanup_~tmp___0~11 := cleanup_#t~ret153;havoc cleanup_#t~ret153; 9251188#L2413 assume 1 != cleanup_~tmp___0~11; 9251183#L2413-1 havoc isIdle_#res;havoc isIdle_#t~ret7, isIdle_~retValue_acc~7, isIdle_~tmp~3;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~3;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret2, anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~2, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~2;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9251180#L2692-104 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9251181#L2719-104 anyStopRequested_#t~ret2 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret2;havoc anyStopRequested_#t~ret2; 9248420#L391 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 9248408#L455 isIdle_#t~ret7 := anyStopRequested_#res;isIdle_~tmp~3 := isIdle_#t~ret7;havoc isIdle_#t~ret7;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~3 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 9248407#L468 cleanup_#t~ret154 := isIdle_#res;cleanup_~tmp~24 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 9248406#L2425 assume !(0 != cleanup_~tmp~24);havoc timeShift_#t~ret41, timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_~tmp~10, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~10;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret25, stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~8, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~8;havoc stopRequestedAtCurrentFloor_~tmp___0~4;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9248404#L2692-109 assume !(0 == isFloorCalling_~floorID); 9248403#L2696-109 assume !(1 == isFloorCalling_~floorID); 9248402#L2700-109 assume !(2 == isFloorCalling_~floorID); 9248401#L2704-109 assume !(3 == isFloorCalling_~floorID); 9248394#L2708-109 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9248392#L2719-109 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9248391#L1568-16 stopRequestedAtCurrentFloor_#t~ret25 := isExecutiveFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp~8 := stopRequestedAtCurrentFloor_#t~ret25;havoc stopRequestedAtCurrentFloor_#t~ret25; 9248390#L952-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9248388#L2692-111 assume !(0 == isFloorCalling_~floorID); 9248389#L2696-111 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9272479#L2719-111 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret23; 9276568#L925-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~3);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 9269825#L300-9 assume !(0 == buttonForFloorIsPressed_~floorID); 9269820#L304-9 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 9269804#L321-9 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret24; 9269800#L932-9 assume !(0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp~7);stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11 := 0;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~11; 9269795#L937-9 stopRequestedAtCurrentFloor_#t~ret28 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~12 := stopRequestedAtCurrentFloor_#t~ret28;havoc stopRequestedAtCurrentFloor_#t~ret28;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 9269792#L969-4 timeShift_#t~ret41 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret41;havoc timeShift_#t~ret41; 9269789#L1105-4 assume !(0 != timeShift_~tmp___9~2); 9269749#L1196-12 assume !(1 == ~doorState~0); 9269745#L1196-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret19, stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~5, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~5;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9269736#L2692-112 assume !(0 == isFloorCalling_~floorID); 9269729#L2696-112 assume !(1 == isFloorCalling_~floorID); 9269720#L2700-112 assume !(2 == isFloorCalling_~floorID); 9269715#L2704-112 assume !(3 == isFloorCalling_~floorID); 9269592#L2708-112 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9269589#L2719-112 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9269586#L1568-17 stopRequestedInDirection_#t~ret19 := isExecutiveFloorCalling_#res;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret19;havoc stopRequestedInDirection_#t~ret19; 9265666#L835-8 assume !(0 != stopRequestedInDirection_~tmp___0~2);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret8, stopRequestedInDirection__wrappee__weight_#t~ret9, stopRequestedInDirection__wrappee__weight_#t~ret10, stopRequestedInDirection__wrappee__weight_#t~ret11, stopRequestedInDirection__wrappee__weight_#t~ret12, stopRequestedInDirection__wrappee__weight_#t~ret13, stopRequestedInDirection__wrappee__weight_#t~ret14, stopRequestedInDirection__wrappee__weight_#t~ret15, stopRequestedInDirection__wrappee__weight_#t~ret16, stopRequestedInDirection__wrappee__weight_#t~ret17, stopRequestedInDirection__wrappee__weight_#t~ret18, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~8, stopRequestedInDirection__wrappee__weight_~tmp~4, stopRequestedInDirection__wrappee__weight_~tmp___0~1, stopRequestedInDirection__wrappee__weight_~tmp___1~1, stopRequestedInDirection__wrappee__weight_~tmp___2~1, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~8;havoc stopRequestedInDirection__wrappee__weight_~tmp~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 9265664#L487-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 9265663#L656-8 assume !(0 == ~currentFloorID~0); 9265662#L662-8 assume ~currentFloorID~0 > 0; 9265661#L663-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9229199#L2692-118 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~27 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9265562#L2719-118 stopRequestedInDirection__wrappee__weight_#t~ret14 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret14;havoc stopRequestedInDirection__wrappee__weight_#t~ret14; 9265502#L667-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~8 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~8; 9265495#L809-8 stopRequestedInDirection_#t~ret21 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~9 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 9265492#L848-8 timeShift_#t~ret48 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret48;havoc timeShift_#t~ret48; 9265485#L1204-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret22, continueInDirection_~dir, continueInDirection_~tmp~6;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~6;~currentHeading~0 := continueInDirection_~dir; 9265482#L892-12 assume !(1 == ~currentHeading~0); 9265479#L902-36 assume !(0 == ~currentFloorID~0); 9263677#L902-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9263669#L908-29 havoc __utac_acc__Specification14_spec__1_#t~ret106, __utac_acc__Specification14_spec__1_#t~ret107, __utac_acc__Specification14_spec__1_#t~ret108, __utac_acc__Specification14_spec__1_#t~ret109, __utac_acc__Specification14_spec__1_~tmp~14, __utac_acc__Specification14_spec__1_~tmp___0~10, __utac_acc__Specification14_spec__1_~tmp___1~7, __utac_acc__Specification14_spec__1_~tmp___2~5;havoc __utac_acc__Specification14_spec__1_~tmp~14;havoc __utac_acc__Specification14_spec__1_~tmp___0~10;havoc __utac_acc__Specification14_spec__1_~tmp___1~7;havoc __utac_acc__Specification14_spec__1_~tmp___2~5;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret99, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~27;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~27; 9263637#L2692-134 assume !(0 == isFloorCalling_~floorID); 9263169#L2696-134 assume !(1 == isFloorCalling_~floorID); 9263165#L2700-134 assume !(2 == isFloorCalling_~floorID); 9263166#L2704-134 assume !(3 == isFloorCalling_~floorID); 9263167#L2708-134 assume !(4 == isFloorCalling_~floorID);isFloorCalling_~retValue_acc~27 := 0;isFloorCalling_#res := isFloorCalling_~retValue_acc~27; 9263168#L2719-134 isExecutiveFloorCalling_#t~ret99 := isFloorCalling_#res;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret99;havoc isExecutiveFloorCalling_#t~ret99;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 9271285#L1568-19 __utac_acc__Specification14_spec__1_#t~ret106 := isExecutiveFloorCalling_#res;__utac_acc__Specification14_spec__1_~tmp___2~5 := __utac_acc__Specification14_spec__1_#t~ret106;havoc __utac_acc__Specification14_spec__1_#t~ret106; 9271280#L1687-8 assume !(0 != __utac_acc__Specification14_spec__1_~tmp___2~5); 9270790#L1687-9 cleanup_~i~3 := 1 + cleanup_~i~3; 9270785#L2405-2 assume !false; 9177589#L2406 [2019-12-07 10:11:46,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:46,764 INFO L82 PathProgramCache]: Analyzing trace with hash -1696814598, now seen corresponding path program 8 times [2019-12-07 10:11:46,764 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:46,764 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1664915929] [2019-12-07 10:11:46,765 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:46,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:46,810 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:46,810 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1664915929] [2019-12-07 10:11:46,810 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 10:11:46,810 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 10:11:46,811 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [408296154] [2019-12-07 10:11:46,811 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 10:11:46,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:46,811 INFO L82 PathProgramCache]: Analyzing trace with hash -64586827, now seen corresponding path program 1 times [2019-12-07 10:11:46,811 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 10:11:46,811 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1566496639] [2019-12-07 10:11:46,811 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 10:11:46,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 10:11:46,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 10:11:46,831 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-12-07 10:11:47,580 WARN L192 SmtUtils]: Spent 745.00 ms on a formula simplification. DAG size of input: 242 DAG size of output: 197 [2019-12-07 10:11:48,066 WARN L192 SmtUtils]: Spent 479.00 ms on a formula simplification. DAG size of input: 152 DAG size of output: 147 [2019-12-07 10:11:48,068 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 10:11:48,068 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 10:11:48,068 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 10:11:48,068 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 10:11:48,068 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-12-07 10:11:48,069 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,069 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 10:11:48,069 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 10:11:48,069 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration20_Loop [2019-12-07 10:11:48,069 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 10:11:48,069 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 10:11:48,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,081 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,091 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,094 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,128 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,129 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,147 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,150 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,151 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,154 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,177 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,202 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,221 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,230 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,231 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,233 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,239 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,240 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:48,768 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 10:11:48,768 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,772 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,772 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,775 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,775 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,779 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,779 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,781 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,781 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret28=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,785 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,785 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,787 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,787 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret153=0} Honda state: {ULTIMATE.start_cleanup_#t~ret153=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,791 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,791 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,793 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,793 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret48=0} Honda state: {ULTIMATE.start_timeShift_#t~ret48=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,797 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,797 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,800 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,800 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret14=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret14=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,804 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,804 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,807 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,807 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,811 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,811 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,813 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,814 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:48,817 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:48,817 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:48,820 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:48,820 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,002 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,002 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,004 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,004 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret99=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret99=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,009 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,009 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,012 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,012 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___2~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___2~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,017 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,017 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,022 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,022 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,025 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,025 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,028 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,028 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret109=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,031 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,032 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,034 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,034 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret9=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,037 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,037 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,040 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,040 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret45=0} Honda state: {ULTIMATE.start_timeShift_#t~ret45=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,044 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,044 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,046 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,046 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~10=0} Honda state: {ULTIMATE.start_timeShift_~tmp~10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,050 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,050 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,052 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,053 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,056 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,057 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,059 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,059 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,063 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,063 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,065 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,065 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,068 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,069 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,071 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 10:11:49,071 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret106=0} Honda state: {ULTIMATE.start___utac_acc__Specification14_spec__1_#t~ret106=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,074 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 10:11:49,074 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,081 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-12-07 10:11:49,081 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 10:11:49,735 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-12-07 10:11:49,736 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 10:11:49,737 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 10:11:49,737 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 10:11:49,737 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 10:11:49,737 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-12-07 10:11:49,737 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:49,737 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 10:11:49,737 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 10:11:49,737 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec14_product19.cil.c_Iteration20_Loop [2019-12-07 10:11:49,737 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 10:11:49,737 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 10:11:49,740 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,742 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,743 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,768 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,775 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,792 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,796 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,804 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,806 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,820 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,835 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,836 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,837 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,838 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,839 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,841 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,844 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,851 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,894 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:49,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 10:11:50,429 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 10:11:50,429 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,432 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,433 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,433 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,433 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,434 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,434 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,434 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,434 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,435 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,438 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,439 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,439 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,439 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,439 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,440 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,440 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,440 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,441 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,445 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,446 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,446 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,446 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,446 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,446 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,446 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,447 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,447 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,451 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,452 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,452 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,452 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,452 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,452 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,453 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,453 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,454 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,457 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,458 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,458 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,458 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,458 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,458 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,459 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,459 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,460 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,463 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,464 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,464 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,464 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,464 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,464 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,464 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,465 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,465 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,469 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,470 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,470 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,470 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,470 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,470 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,470 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,471 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,472 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,475 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,476 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,476 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,476 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,476 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,476 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,476 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,476 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,477 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,481 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,482 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,482 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,483 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,483 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,483 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,484 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,484 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,485 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,489 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,490 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,490 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,490 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,490 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,490 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,490 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,490 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,491 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,495 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,496 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,496 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,496 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,496 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,496 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,496 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,497 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,498 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,502 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,503 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,503 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,503 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,503 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,503 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,503 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,503 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,504 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,507 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,508 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,508 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,508 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,508 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,508 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,509 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,509 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,510 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,513 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,514 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,515 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,515 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,515 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,515 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,515 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,515 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,516 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,520 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,521 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,521 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,521 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,521 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,521 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,521 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,521 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,523 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,526 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,527 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,528 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,528 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,528 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,528 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,528 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,528 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,529 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,533 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,534 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,534 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,534 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,534 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,534 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,534 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,534 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,535 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,539 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,540 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,540 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,540 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,540 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,540 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,541 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,541 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,542 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,545 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,547 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,547 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,547 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,547 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,547 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,547 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,547 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,549 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,710 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,711 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,711 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,711 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,711 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,711 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,712 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,712 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,713 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,716 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 10:11:50,717 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 10:11:50,717 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 10:11:50,717 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 10:11:50,717 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 10:11:50,718 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 10:11:50,718 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 10:11:50,718 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 10:11:50,720 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-12-07 10:11:50,724 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2019-12-07 10:11:50,724 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_37745ee5-2ed8-444a-8b6f-27e111127f11/bin/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 10:11:50,727 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-12-07 10:11:50,727 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-12-07 10:11:50,727 INFO L510 LassoAnalysis]: Proved termination. [2019-12-07 10:11:50,727 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2019-12-07 10:11:50,728 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-12-07 10:11:50,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 10:11:50,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:50,851 INFO L264 TraceCheckSpWp]: Trace formula consists of 1013 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 10:11:50,854 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 10:11:50,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 10:11:50,889 INFO L264 TraceCheckSpWp]: Trace formula consists of 211 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 10:11:50,891 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 10:11:50,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 10:11:50,920 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 4 loop predicates [2019-12-07 10:11:50,920 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 271864 states and 479136 transitions. cyclomatic complexity: 207371 Second operand 5 states. [2019-12-07 10:11:52,278 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 271864 states and 479136 transitions. cyclomatic complexity: 207371. Second operand 5 states. Result 436972 states and 769991 transitions. Complement of second has 8 states. [2019-12-07 10:11:52,278 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-12-07 10:11:52,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-12-07 10:11:52,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 9835 transitions. [2019-12-07 10:11:52,285 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9835 transitions. Stem has 142 letters. Loop has 64 letters. [2019-12-07 10:11:52,286 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 10:11:52,286 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9835 transitions. Stem has 206 letters. Loop has 64 letters. [2019-12-07 10:11:52,287 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 10:11:52,287 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9835 transitions. Stem has 142 letters. Loop has 128 letters. [2019-12-07 10:11:52,288 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 10:11:52,288 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 436972 states and 769991 transitions. [2019-12-07 10:11:53,746 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 10:11:53,746 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 436972 states to 0 states and 0 transitions. [2019-12-07 10:11:53,746 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 10:11:53,746 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 10:11:53,746 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 10:11:53,747 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 10:11:53,747 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 10:11:53,747 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 10:11:53,747 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 10:11:53,747 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 10:11:53,747 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 10:11:53,747 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 6 states. [2019-12-07 10:11:53,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 10:11:53,747 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-12-07 10:11:53,747 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 10:11:53,747 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-12-07 10:11:53,747 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 10:11:53,748 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 10:11:53,748 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 10:11:53,748 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 10:11:53,748 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 10:11:53,748 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 10:11:53,748 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 10:11:53,748 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 10:11:53,748 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 10:11:53,748 INFO L424 BuchiCegarLoop]: ======== Iteration 21============ [2019-12-07 10:11:53,748 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-12-07 10:11:53,748 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 10:11:53,748 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-12-07 10:11:53,753 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 07.12 10:11:53 BoogieIcfgContainer [2019-12-07 10:11:53,753 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-12-07 10:11:53,754 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 10:11:53,754 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 10:11:53,754 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 10:11:53,754 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 10:07:58" (3/4) ... [2019-12-07 10:11:53,757 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-12-07 10:11:53,758 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 10:11:53,759 INFO L168 Benchmark]: Toolchain (without parser) took 242270.42 ms. Allocated memory was 1.0 GB in the beginning and 8.5 GB in the end (delta: 7.4 GB). Free memory was 937.0 MB in the beginning and 3.8 GB in the end (delta: -2.9 GB). Peak memory consumption was 4.5 GB. Max. memory is 11.5 GB. [2019-12-07 10:11:53,759 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 958.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 10:11:53,759 INFO L168 Benchmark]: CACSL2BoogieTranslator took 547.98 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 102.2 MB). Free memory was 937.0 MB in the beginning and 1.1 GB in the end (delta: -121.6 MB). Peak memory consumption was 30.2 MB. Max. memory is 11.5 GB. [2019-12-07 10:11:53,760 INFO L168 Benchmark]: Boogie Procedure Inliner took 188.77 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 998.5 MB in the end (delta: 60.1 MB). Peak memory consumption was 60.1 MB. Max. memory is 11.5 GB. [2019-12-07 10:11:53,760 INFO L168 Benchmark]: Boogie Preprocessor took 224.15 ms. Allocated memory is still 1.1 GB. Free memory was 998.5 MB in the beginning and 943.8 MB in the end (delta: 54.8 MB). Peak memory consumption was 54.8 MB. Max. memory is 11.5 GB. [2019-12-07 10:11:53,760 INFO L168 Benchmark]: RCFGBuilder took 5787.85 ms. Allocated memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: 327.7 MB). Free memory was 943.8 MB in the beginning and 868.9 MB in the end (delta: 74.9 MB). Peak memory consumption was 402.6 MB. Max. memory is 11.5 GB. [2019-12-07 10:11:53,761 INFO L168 Benchmark]: BuchiAutomizer took 235514.36 ms. Allocated memory was 1.5 GB in the beginning and 8.5 GB in the end (delta: 7.0 GB). Free memory was 868.9 MB in the beginning and 3.9 GB in the end (delta: -3.0 GB). Peak memory consumption was 4.0 GB. Max. memory is 11.5 GB. [2019-12-07 10:11:53,761 INFO L168 Benchmark]: Witness Printer took 4.09 ms. Allocated memory is still 8.5 GB. Free memory was 3.9 GB in the beginning and 3.8 GB in the end (delta: 27.7 MB). Peak memory consumption was 27.7 MB. Max. memory is 11.5 GB. [2019-12-07 10:11:53,763 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 958.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 547.98 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 102.2 MB). Free memory was 937.0 MB in the beginning and 1.1 GB in the end (delta: -121.6 MB). Peak memory consumption was 30.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 188.77 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 998.5 MB in the end (delta: 60.1 MB). Peak memory consumption was 60.1 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 224.15 ms. Allocated memory is still 1.1 GB. Free memory was 998.5 MB in the beginning and 943.8 MB in the end (delta: 54.8 MB). Peak memory consumption was 54.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 5787.85 ms. Allocated memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: 327.7 MB). Free memory was 943.8 MB in the beginning and 868.9 MB in the end (delta: 74.9 MB). Peak memory consumption was 402.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 235514.36 ms. Allocated memory was 1.5 GB in the beginning and 8.5 GB in the end (delta: 7.0 GB). Free memory was 868.9 MB in the beginning and 3.9 GB in the end (delta: -3.0 GB). Peak memory consumption was 4.0 GB. Max. memory is 11.5 GB. * Witness Printer took 4.09 ms. Allocated memory is still 8.5 GB. Free memory was 3.9 GB in the beginning and 3.8 GB in the end (delta: 27.7 MB). Peak memory consumption was 27.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 22 terminating modules (20 trivial, 2 deterministic, 0 nondeterministic). One deterministic module has affine ranking function currentFloorID and consists of 14 locations. One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 20 modules have a trivial ranking function, the largest among these consists of 9 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 235.4s and 21 iterations. TraceHistogramMax:1. Analysis of lassos took 18.8s. Construction of modules took 60.3s. Büchi inclusion checks took 47.3s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 16. Automata minimization 48.6s AutomataMinimizationTime, 20 MinimizatonAttempts, 4123932 StatesRemovedByMinimization, 20 NontrivialMinimizations. Non-live state removal took 46.3s Buchi closure took 2.8s. Biggest automaton had 271864 states and ocurred in iteration 18. Nontrivial modules had stage [2, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 454580 SDtfs, 1354201 SDslu, 1599184 SDs, 0 SdLazy, 90004 SolverSat, 10931 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 60.3s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI18 SILT2 lasso0 LassoPreprocessingBenchmarks: Lassos: inital195 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf1054 smp54 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 8ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 22 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 2 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 11.1s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...