./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product17_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 0cd3be1d Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product17_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 95d7d0ca49f712eb23aa5769d1ca394c9e66f5be .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-0cd3be1 [2018-11-28 11:42:08,513 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-28 11:42:08,514 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-28 11:42:08,522 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-28 11:42:08,523 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-28 11:42:08,523 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-28 11:42:08,524 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-28 11:42:08,525 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-28 11:42:08,526 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-28 11:42:08,527 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-28 11:42:08,527 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-28 11:42:08,528 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-28 11:42:08,528 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-28 11:42:08,529 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-28 11:42:08,530 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-28 11:42:08,530 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-28 11:42:08,531 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-28 11:42:08,532 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-28 11:42:08,533 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-28 11:42:08,534 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-28 11:42:08,535 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-28 11:42:08,536 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-28 11:42:08,537 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-28 11:42:08,538 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-28 11:42:08,538 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-28 11:42:08,538 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-28 11:42:08,539 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-28 11:42:08,540 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-28 11:42:08,540 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-28 11:42:08,541 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-28 11:42:08,541 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-28 11:42:08,541 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-28 11:42:08,542 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-28 11:42:08,542 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-28 11:42:08,542 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-28 11:42:08,543 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-28 11:42:08,543 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-28 11:42:08,554 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-28 11:42:08,554 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-28 11:42:08,555 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-28 11:42:08,555 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-28 11:42:08,555 INFO L133 SettingsManager]: * Use SBE=true [2018-11-28 11:42:08,555 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-28 11:42:08,555 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-28 11:42:08,555 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-28 11:42:08,556 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-28 11:42:08,556 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-28 11:42:08,556 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-28 11:42:08,556 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-28 11:42:08,556 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-28 11:42:08,556 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-28 11:42:08,556 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-28 11:42:08,557 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-28 11:42:08,557 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-28 11:42:08,557 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-28 11:42:08,557 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-28 11:42:08,557 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-28 11:42:08,557 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-28 11:42:08,557 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-28 11:42:08,558 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-28 11:42:08,558 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-28 11:42:08,558 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-28 11:42:08,558 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-28 11:42:08,558 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-28 11:42:08,558 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-28 11:42:08,559 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-28 11:42:08,559 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-28 11:42:08,559 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-28 11:42:08,559 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-28 11:42:08,560 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 95d7d0ca49f712eb23aa5769d1ca394c9e66f5be [2018-11-28 11:42:08,583 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-28 11:42:08,590 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-28 11:42:08,592 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-28 11:42:08,593 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-28 11:42:08,593 INFO L276 PluginConnector]: CDTParser initialized [2018-11-28 11:42:08,594 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product17_true-unreach-call_true-termination.cil.c [2018-11-28 11:42:08,633 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/data/ecb78f01d/2f3d30aded9f4e3eabfcd43604067566/FLAG76f4914c3 [2018-11-28 11:42:09,106 INFO L307 CDTParser]: Found 1 translation units. [2018-11-28 11:42:09,107 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/sv-benchmarks/c/product-lines/elevator_spec3_product17_true-unreach-call_true-termination.cil.c [2018-11-28 11:42:09,119 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/data/ecb78f01d/2f3d30aded9f4e3eabfcd43604067566/FLAG76f4914c3 [2018-11-28 11:42:09,612 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/data/ecb78f01d/2f3d30aded9f4e3eabfcd43604067566 [2018-11-28 11:42:09,615 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-28 11:42:09,616 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-28 11:42:09,616 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-28 11:42:09,616 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-28 11:42:09,618 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-28 11:42:09,619 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:42:09" (1/1) ... [2018-11-28 11:42:09,620 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4949fb7e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:09, skipping insertion in model container [2018-11-28 11:42:09,620 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 11:42:09" (1/1) ... [2018-11-28 11:42:09,625 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-28 11:42:09,664 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-28 11:42:10,040 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 11:42:10,052 INFO L191 MainTranslator]: Completed pre-run [2018-11-28 11:42:10,132 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-11-28 11:42:10,171 INFO L195 MainTranslator]: Completed translation [2018-11-28 11:42:10,171 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10 WrapperNode [2018-11-28 11:42:10,171 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-28 11:42:10,172 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-28 11:42:10,172 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-28 11:42:10,172 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-28 11:42:10,180 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,199 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,390 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-28 11:42:10,391 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-28 11:42:10,391 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-28 11:42:10,391 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-28 11:42:10,399 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,399 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,425 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,425 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,487 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,545 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,566 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... [2018-11-28 11:42:10,601 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-28 11:42:10,602 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-28 11:42:10,602 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-28 11:42:10,602 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-28 11:42:10,603 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:42:10,651 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-28 11:42:10,651 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-28 11:42:10,651 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-28 11:42:10,651 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-28 11:42:16,657 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-28 11:42:16,657 INFO L280 CfgBuilder]: Removed 1347 assue(true) statements. [2018-11-28 11:42:16,658 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:42:16 BoogieIcfgContainer [2018-11-28 11:42:16,658 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-28 11:42:16,658 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-28 11:42:16,658 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-28 11:42:16,660 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-28 11:42:16,661 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 11:42:16,661 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 28.11 11:42:09" (1/3) ... [2018-11-28 11:42:16,662 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6a669948 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 11:42:16, skipping insertion in model container [2018-11-28 11:42:16,662 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 11:42:16,662 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 11:42:10" (2/3) ... [2018-11-28 11:42:16,662 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@6a669948 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 28.11 11:42:16, skipping insertion in model container [2018-11-28 11:42:16,662 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-28 11:42:16,662 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:42:16" (3/3) ... [2018-11-28 11:42:16,663 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product17_true-unreach-call_true-termination.cil.c [2018-11-28 11:42:16,703 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-28 11:42:16,704 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-28 11:42:16,704 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-28 11:42:16,704 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-28 11:42:16,707 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-28 11:42:16,707 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-28 11:42:16,708 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-28 11:42:16,708 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-28 11:42:16,708 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-28 11:42:16,775 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6063 states. [2018-11-28 11:42:16,869 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1230 [2018-11-28 11:42:16,870 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:16,870 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:16,884 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:16,884 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:16,884 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-28 11:42:16,884 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6063 states. [2018-11-28 11:42:16,937 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1230 [2018-11-28 11:42:16,937 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:16,938 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:16,941 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:16,941 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:16,948 INFO L794 eck$LassoCheckResult]: Stem: 3473#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 4837#L-1true havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 187#L3326true havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 1058#L3334true main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 4742#L3172true assume 0 != main_~tmp~25; 612#L3146true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5019#L438true havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 2207#L3229true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 687#L3254true bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5714#L716true assume 0 == initPersonOnFloor_~floor; 5340#L717true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4228#L824-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 170#L508true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 863#L520-2true havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4509#L1616true __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 702#L1668true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 4844#L87true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 4915#L88true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1413#L1633true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 282#L1654true __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 4601#L92true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 5258#L193true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 4725#L445true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4197#L472true stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2941#L2229true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3917#L2241true timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 4919#L2378true assume !(0 != timeShift_~tmp___9~3); 4796#L2469true assume !(1 == ~doorState~0); 4778#L2469-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2056#L1820true assume !(1 == stopRequestedInDirection_~dir); 2544#L1989true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4461#L2142true timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 5753#L2477true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 746#L2196true assume !(1 == ~currentHeading~0); 4608#L2206true assume !(0 == ~currentFloorID~0); 4616#L2206-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5579#L2212-5true havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1709#L218true assume !(-1 == ~expectedDirection~0); 2303#L230true assume !(1 == ~expectedDirection~0); 2472#L231true havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4510#L1616-1true __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 710#L1668-3true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 4841#L87-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 4912#L88-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1397#L1633-11true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 240#L1654-11true __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 4596#L92-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 5255#L193-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 4680#L445-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4332#L472-21true stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2923#L2229-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3919#L2241-1true timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 4908#L2378-1true assume !(0 != timeShift_~tmp___9~3); 4782#L2469-3true assume !(1 == ~doorState~0); 4788#L2469-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2057#L1820-2true assume !(1 == stopRequestedInDirection_~dir); 2532#L1989-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4478#L2142-2true timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 5761#L2477-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 750#L2196-3true assume !(1 == ~currentHeading~0); 4607#L2206-9true assume !(0 == ~currentFloorID~0); 4586#L2206-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5794#L2212-11true havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1733#L218-1true assume !(-1 == ~expectedDirection~0); 2297#L230-1true assume !(1 == ~expectedDirection~0); 2471#L231-1true havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4491#L1616-2true __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 690#L1668-6true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 4838#L87-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 566#L149-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1362#L1633-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 70#L1654-27true __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 345#L153-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 5251#L193-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5939#L445-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4280#L472-42true stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2922#L2229-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 3918#L2241-2true timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 4911#L2378-2true assume !(0 != timeShift_~tmp___9~3); 4786#L2469-6true assume 1 == ~doorState~0;~doorState~0 := 0; 4771#L2469-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2042#L1820-4true assume !(1 == stopRequestedInDirection_~dir); 2537#L1989-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4481#L2142-4true timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 5757#L2477-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 728#L2196-6true assume !(1 == ~currentHeading~0); 4580#L2206-18true assume !(0 == ~currentFloorID~0); 4583#L2206-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5771#L2212-17true havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1731#L218-2true assume !(-1 == ~expectedDirection~0); 2343#L230-2true assume !(1 == ~expectedDirection~0); 2469#L231-2true havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 2213#L3229-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 682#L3254-1true bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 5716#L716-1true assume 0 == initPersonOnFloor_~floor; 5341#L717-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4233#L824-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 175#L508-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 858#L520-5true havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4492#L1616-3true __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 696#L1668-9true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 4941#L87-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 4907#L88-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1354#L1633-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 51#L1654-33true __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 4611#L92-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3700#L193-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5886#L445-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 4018#L472-63true stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2925#L2229-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1903#L2241-3true timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 4910#L2378-3true assume !(0 != timeShift_~tmp___9~3); 4774#L2469-9true assume !(1 == ~doorState~0); 4776#L2469-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2043#L1820-6true assume !(1 == stopRequestedInDirection_~dir); 2538#L1989-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4448#L2142-6true timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 5765#L2477-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 735#L2196-9true assume !(1 == ~currentHeading~0); 4710#L2206-27true assume !(0 == ~currentFloorID~0); 4717#L2206-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5756#L2212-23true havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1726#L218-3true assume !(-1 == ~expectedDirection~0); 2337#L230-3true assume !(1 == ~expectedDirection~0); 2484#L231-3true cleanup_~i~3 := 0; 132#L2978-2true [2018-11-28 11:42:16,949 INFO L796 eck$LassoCheckResult]: Loop: 132#L2978-2true assume !false; 1194#L2979true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1005#L2982true assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 2352#L1463true cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 898#L2986true assume 1 != cleanup_~tmp___0~10; 877#L2986-1true havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 6048#L445-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3952#L472-84true anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 2580#L1724true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 2758#L1788true isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1880#L1801true cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 4762#L2998true assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 4498#L1616-4true __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 679#L1668-12true __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 4936#L87-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 560#L149-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1474#L1633-49true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 18#L1654-49true __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 459#L153-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3694#L193-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 6029#L445-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3966#L472-89true stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2931#L2229-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1906#L2241-4true timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 4914#L2378-4true assume !(0 != timeShift_~tmp___9~3); 4755#L2469-12true assume 1 == ~doorState~0;~doorState~0 := 0; 4758#L2469-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2031#L1820-8true assume !(1 == stopRequestedInDirection_~dir); 2721#L1989-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 4450#L2142-8true timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 5739#L2477-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 723#L2196-12true assume !(1 == ~currentHeading~0); 4707#L2206-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4690#L2206-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5742#L2212-29true havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1724#L218-4true assume !(-1 == ~expectedDirection~0); 2333#L230-4true assume !(1 == ~expectedDirection~0); 2482#L231-4true cleanup_~i~3 := 1 + cleanup_~i~3; 132#L2978-2true [2018-11-28 11:42:16,961 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:16,962 INFO L82 PathProgramCache]: Analyzing trace with hash 862631770, now seen corresponding path program 1 times [2018-11-28 11:42:16,963 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:16,964 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:17,005 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:17,005 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:17,005 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:17,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:17,234 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:17,236 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:17,237 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:17,241 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:17,241 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:17,241 INFO L82 PathProgramCache]: Analyzing trace with hash 716074027, now seen corresponding path program 1 times [2018-11-28 11:42:17,241 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:17,241 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:17,242 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:17,242 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:17,242 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:17,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:17,330 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:17,330 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:17,330 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 11:42:17,331 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:17,345 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 11:42:17,346 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 11:42:17,347 INFO L87 Difference]: Start difference. First operand 6063 states. Second operand 6 states. [2018-11-28 11:42:20,383 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:20,384 INFO L93 Difference]: Finished difference Result 15243 states and 28534 transitions. [2018-11-28 11:42:20,384 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-28 11:42:20,385 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15243 states and 28534 transitions. [2018-11-28 11:42:20,495 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3523 [2018-11-28 11:42:20,559 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15243 states to 15173 states and 28453 transitions. [2018-11-28 11:42:20,561 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15173 [2018-11-28 11:42:20,572 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15173 [2018-11-28 11:42:20,573 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15173 states and 28453 transitions. [2018-11-28 11:42:20,600 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:20,601 INFO L705 BuchiCegarLoop]: Abstraction has 15173 states and 28453 transitions. [2018-11-28 11:42:20,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15173 states and 28453 transitions. [2018-11-28 11:42:20,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15173 to 10107. [2018-11-28 11:42:20,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10107 states. [2018-11-28 11:42:20,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10107 states to 10107 states and 18964 transitions. [2018-11-28 11:42:20,818 INFO L728 BuchiCegarLoop]: Abstraction has 10107 states and 18964 transitions. [2018-11-28 11:42:20,818 INFO L608 BuchiCegarLoop]: Abstraction has 10107 states and 18964 transitions. [2018-11-28 11:42:20,819 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-28 11:42:20,819 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10107 states and 18964 transitions. [2018-11-28 11:42:20,850 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2265 [2018-11-28 11:42:20,851 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:20,851 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:20,853 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:20,853 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:20,854 INFO L794 eck$LassoCheckResult]: Stem: 25857#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 25858#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 21826#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 21827#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 23063#L3172 assume 0 != main_~tmp~25; 22434#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 22435#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 24387#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 21360#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 22561#L716 assume 0 == initPersonOnFloor_~floor; 27204#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21508#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 21783#L508 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 21342#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 22828#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22590#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 22591#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 26834#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 23357#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 22014#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 22015#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 22114#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 26704#L445 assume !(0 == isFloorCalling_~floorID); 26705#L449 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25686#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 25141#L2229 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 25142#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 26267#L2378 assume !(0 != timeShift_~tmp___9~3); 26793#L2469 assume !(1 == ~doorState~0); 26764#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24228#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 24230#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 22280#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 22281#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 26542#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 22692#L2196 assume !(1 == ~currentHeading~0); 22693#L2206 assume !(0 == ~currentFloorID~0); 26583#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26577#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 23832#L218 assume !(-1 == ~expectedDirection~0); 23742#L230 assume !(1 == ~expectedDirection~0); 24187#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24581#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22607#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 22608#L87-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 26833#L88-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 26890#L98-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 23325#L1633-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 21950#L1654-12 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 21951#L103-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 23266#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 27135#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25929#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 25102#L2229-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 25103#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 26269#L2378-1 assume !(0 != timeShift_~tmp___9~3); 26770#L2469-3 assume !(1 == ~doorState~0); 26771#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24231#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 24232#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 31190#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 31188#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 31189#L2196-3 assume !(1 == ~currentHeading~0); 31314#L2206-9 assume !(0 == ~currentFloorID~0); 26569#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26560#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 23856#L218-1 assume !(-1 == ~expectedDirection~0); 23738#L230-1 assume !(1 == ~expectedDirection~0); 24175#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 24580#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22566#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 22567#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 22385#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 21671#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21673#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 22675#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 26669#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23296#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 27131#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25836#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 25100#L2229-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 25101#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 26268#L2378-2 assume !(0 != timeShift_~tmp___9~3); 26777#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 26754#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24202#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 24203#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 31267#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 31265#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 31266#L2196-6 assume !(1 == ~currentHeading~0); 31310#L2206-18 assume !(0 == ~currentFloorID~0); 26561#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26566#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 23854#L218-2 assume !(-1 == ~expectedDirection~0); 23735#L230-2 assume !(1 == ~expectedDirection~0); 24174#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 24393#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 21355#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 22552#L716-1 assume 0 == initPersonOnFloor_~floor; 27205#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21422#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 21792#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 21743#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 22823#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22578#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 22579#L87-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 26887#L88-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 26888#L98-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 27387#L1633-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 30257#L1654-34 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 30241#L103-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 26101#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 26102#L445-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25319#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 25106#L2229-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24056#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 24057#L2378-3 assume !(0 != timeShift_~tmp___9~3); 26760#L2469-9 assume !(1 == ~doorState~0); 26761#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24205#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 24206#L1989-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 22480#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 26536#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 31312#L2196-9 assume !(1 == ~currentHeading~0); 31311#L2206-27 assume !(0 == ~currentFloorID~0); 26686#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26674#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 23849#L218-3 assume !(-1 == ~expectedDirection~0); 23732#L230-3 assume !(1 == ~expectedDirection~0); 24173#L231-3 cleanup_~i~3 := 0; 21689#L2978-2 [2018-11-28 11:42:20,854 INFO L796 eck$LassoCheckResult]: Loop: 21689#L2978-2 assume !false; 21690#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 22992#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 22993#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 22876#L2986 assume 1 != cleanup_~tmp___0~10; 22846#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 22847#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25234#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 24648#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 22230#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 24024#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 24025#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 26552#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 22546#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 22547#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 22377#L149-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 21650#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 21651#L170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 22656#L181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 26663#L192-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23237#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 26095#L445-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 25202#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 25119#L2229-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 24060#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 24061#L2378-4 assume !(0 != timeShift_~tmp___9~3); 26733#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 26734#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 24183#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 24184#L1989-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 31322#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 31321#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 22637#L2196-12 assume !(1 == ~currentHeading~0); 22638#L2206-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 26664#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 26652#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 23847#L218-4 assume !(-1 == ~expectedDirection~0); 23727#L230-4 assume !(1 == ~expectedDirection~0); 24177#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 21689#L2978-2 [2018-11-28 11:42:20,857 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:20,857 INFO L82 PathProgramCache]: Analyzing trace with hash -1449005196, now seen corresponding path program 1 times [2018-11-28 11:42:20,857 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:20,857 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:20,858 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:20,858 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:20,858 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:20,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:20,961 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:20,961 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:20,961 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:20,962 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:20,962 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:20,962 INFO L82 PathProgramCache]: Analyzing trace with hash -922011119, now seen corresponding path program 1 times [2018-11-28 11:42:20,962 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:20,962 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:20,963 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:20,963 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:20,963 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:20,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:20,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:20,995 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:20,995 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 11:42:20,995 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:20,995 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 11:42:20,995 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 11:42:20,995 INFO L87 Difference]: Start difference. First operand 10107 states and 18964 transitions. cyclomatic complexity: 8858 Second operand 6 states. [2018-11-28 11:42:21,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:21,468 INFO L93 Difference]: Finished difference Result 18187 states and 34206 transitions. [2018-11-28 11:42:21,469 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-28 11:42:21,470 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18187 states and 34206 transitions. [2018-11-28 11:42:21,543 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4162 [2018-11-28 11:42:21,606 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18187 states to 18187 states and 34206 transitions. [2018-11-28 11:42:21,606 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18187 [2018-11-28 11:42:21,620 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18187 [2018-11-28 11:42:21,620 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18187 states and 34206 transitions. [2018-11-28 11:42:21,637 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:21,637 INFO L705 BuchiCegarLoop]: Abstraction has 18187 states and 34206 transitions. [2018-11-28 11:42:21,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18187 states and 34206 transitions. [2018-11-28 11:42:21,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18187 to 10125. [2018-11-28 11:42:21,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10125 states. [2018-11-28 11:42:21,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10125 states to 10125 states and 18982 transitions. [2018-11-28 11:42:21,799 INFO L728 BuchiCegarLoop]: Abstraction has 10125 states and 18982 transitions. [2018-11-28 11:42:21,799 INFO L608 BuchiCegarLoop]: Abstraction has 10125 states and 18982 transitions. [2018-11-28 11:42:21,799 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-28 11:42:21,800 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10125 states and 18982 transitions. [2018-11-28 11:42:21,886 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2269 [2018-11-28 11:42:21,886 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:21,886 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:21,889 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:21,889 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:21,889 INFO L794 eck$LassoCheckResult]: Stem: 54199#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 54200#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 50150#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 50151#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 51381#L3172 assume 0 != main_~tmp~25; 50759#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 50760#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 52714#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 49689#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 50884#L716 assume 0 == initPersonOnFloor_~floor; 55514#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 49834#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 50107#L508 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 49666#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 51147#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 50915#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 50916#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 55154#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 51679#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 50344#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 50345#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 50441#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 55021#L445 assume !(0 == isFloorCalling_~floorID); 55022#L449 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 54024#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 53481#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 51632#L1633-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 50265#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 50266#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54605#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 54606#L2378 assume !(0 != timeShift_~tmp___9~3); 55113#L2469 assume !(1 == ~doorState~0); 55087#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 52551#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 52553#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 50605#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 50606#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 54858#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 51011#L2196 assume !(1 == ~currentHeading~0); 51012#L2206 assume !(0 == ~currentFloorID~0); 54900#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54893#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 55999#L218 assume !(-1 == ~expectedDirection~0); 55995#L230 assume !(1 == ~expectedDirection~0); 55993#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 55992#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 55990#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 55988#L87-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 55989#L88-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 55991#L98-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 55980#L1633-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 55978#L1654-12 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 55976#L103-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 55969#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 55960#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 55958#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 55944#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 55928#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 55927#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 55924#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 55923#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 55921#L2378-1 assume !(0 != timeShift_~tmp___9~3); 55920#L2469-3 assume !(1 == ~doorState~0); 55918#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 55917#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 55916#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 55889#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 55886#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 55883#L2196-3 assume !(1 == ~currentHeading~0); 55881#L2206-9 assume !(0 == ~currentFloorID~0); 54886#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54877#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 52176#L218-1 assume !(-1 == ~expectedDirection~0); 52057#L230-1 assume !(1 == ~expectedDirection~0); 52498#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 52909#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 56436#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 56435#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 56433#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 56431#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 56415#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 56406#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 56399#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 56086#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56084#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56080#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 56079#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 56077#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 56072#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 56071#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 56069#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 56067#L2378-2 assume !(0 != timeShift_~tmp___9~3); 56065#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 56063#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 56058#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 55895#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 55888#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 55884#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 55882#L2196-6 assume !(1 == ~currentHeading~0); 55880#L2206-18 assume !(0 == ~currentFloorID~0); 54878#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54883#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 57412#L218-2 assume !(-1 == ~expectedDirection~0); 57409#L230-2 assume !(1 == ~expectedDirection~0); 57407#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 57403#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 57400#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 57399#L716-1 assume 0 == initPersonOnFloor_~floor; 57373#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 57352#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 57334#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 57304#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 57303#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 57302#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 57301#L87-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 55205#L88-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 55206#L98-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 51564#L1633-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 49722#L1654-34 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 49723#L103-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 51600#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 54441#L445-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 53656#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 53444#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 51837#L1633-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 49712#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 49713#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 54636#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 56438#L2378-3 assume !(0 != timeShift_~tmp___9~3); 55080#L2469-9 assume !(1 == ~doorState~0); 55081#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 52528#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 52529#L1989-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 50804#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 54853#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 55786#L2196-9 assume !(1 == ~currentHeading~0); 56100#L2206-27 assume !(0 == ~currentFloorID~0); 55002#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54991#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 55780#L218-3 assume !(-1 == ~expectedDirection~0); 58209#L230-3 assume !(1 == ~expectedDirection~0); 52919#L231-3 cleanup_~i~3 := 0; 50013#L2978-2 [2018-11-28 11:42:21,890 INFO L796 eck$LassoCheckResult]: Loop: 50013#L2978-2 assume !false; 50014#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 51310#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 51311#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 57350#L2986 assume 1 != cleanup_~tmp___0~10; 57349#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 57342#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 57338#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 57321#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 57316#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 52343#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 52344#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 56396#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 56395#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 56394#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 56392#L149-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 56390#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 56374#L170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 56365#L181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 56358#L192-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 56315#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 56313#L445-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 56293#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 56292#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 56290#L1633-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 56284#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 56282#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 56276#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 56273#L2378-4 assume !(0 != timeShift_~tmp___9~3); 56272#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 56271#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 56270#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 56268#L1989-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 50775#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 56291#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 56238#L2196-12 assume !(1 == ~currentHeading~0); 56094#L2206-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54982#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 54968#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 58215#L218-4 assume !(-1 == ~expectedDirection~0); 58212#L230-4 assume !(1 == ~expectedDirection~0); 52917#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 50013#L2978-2 [2018-11-28 11:42:21,892 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:21,895 INFO L82 PathProgramCache]: Analyzing trace with hash 711260277, now seen corresponding path program 1 times [2018-11-28 11:42:21,895 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:21,895 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:21,896 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:21,896 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:21,896 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:21,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:21,986 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:21,987 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:21,987 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:21,987 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:21,987 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:21,987 INFO L82 PathProgramCache]: Analyzing trace with hash 1898671110, now seen corresponding path program 1 times [2018-11-28 11:42:21,987 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:21,988 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:21,988 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:21,988 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:21,988 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:21,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:22,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:22,029 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:22,029 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 11:42:22,029 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:22,029 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 11:42:22,029 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-11-28 11:42:22,029 INFO L87 Difference]: Start difference. First operand 10125 states and 18982 transitions. cyclomatic complexity: 8858 Second operand 7 states. [2018-11-28 11:42:23,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:23,829 INFO L93 Difference]: Finished difference Result 62880 states and 118382 transitions. [2018-11-28 11:42:23,829 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2018-11-28 11:42:23,829 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62880 states and 118382 transitions. [2018-11-28 11:42:24,014 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22726 [2018-11-28 11:42:24,214 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62880 states to 62880 states and 118382 transitions. [2018-11-28 11:42:24,214 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 62880 [2018-11-28 11:42:24,471 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 62880 [2018-11-28 11:42:24,471 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62880 states and 118382 transitions. [2018-11-28 11:42:24,488 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:24,488 INFO L705 BuchiCegarLoop]: Abstraction has 62880 states and 118382 transitions. [2018-11-28 11:42:24,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62880 states and 118382 transitions. [2018-11-28 11:42:24,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62880 to 20211. [2018-11-28 11:42:24,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 20211 states. [2018-11-28 11:42:24,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20211 states to 20211 states and 37881 transitions. [2018-11-28 11:42:24,713 INFO L728 BuchiCegarLoop]: Abstraction has 20211 states and 37881 transitions. [2018-11-28 11:42:24,713 INFO L608 BuchiCegarLoop]: Abstraction has 20211 states and 37881 transitions. [2018-11-28 11:42:24,713 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-28 11:42:24,713 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20211 states and 37881 transitions. [2018-11-28 11:42:24,747 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4548 [2018-11-28 11:42:24,747 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:24,747 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:24,749 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:24,750 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:24,750 INFO L794 eck$LassoCheckResult]: Stem: 127464#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 127465#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 123210#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 123211#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 124491#L3172 assume 0 != main_~tmp~25; 123852#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 123853#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 125924#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 122741#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 123981#L716 assume 0 == initPersonOnFloor_~floor; 129095#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 122889#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 123164#L508 assume !(0 == callOnFloor_~floorID); 122722#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 122723#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 124253#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 124010#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 124011#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 128653#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 124831#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 123405#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 123406#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 129012#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 129013#L445 assume !(0 == isFloorCalling_~floorID); 129548#L449 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 127292#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 126746#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 126748#L1633-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 129992#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 129991#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 129990#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 129989#L2378 assume !(0 != timeShift_~tmp___9~3); 129988#L2469 assume !(1 == ~doorState~0); 129987#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 125754#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 125756#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 126232#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 128292#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 128293#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 124115#L2196 assume !(1 == ~currentHeading~0); 124116#L2206 assume !(0 == ~currentFloorID~0); 128347#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 128340#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 129853#L218 assume !(-1 == ~expectedDirection~0); 129847#L230 assume !(1 == ~expectedDirection~0); 129844#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 129840#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 129836#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 129807#L87-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 129808#L88-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 129832#L98-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 129789#L1633-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 129767#L1654-12 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 129752#L103-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 129741#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 129736#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 129735#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 129734#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 129729#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 129728#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 129727#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 129726#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 129725#L2378-1 assume !(0 != timeShift_~tmp___9~3); 129724#L2469-3 assume !(1 == ~doorState~0); 129723#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 129718#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 129676#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 129664#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 129662#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 129663#L2196-3 assume !(1 == ~currentHeading~0); 130467#L2206-9 assume !(0 == ~currentFloorID~0); 130582#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 130580#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 130576#L218-1 assume !(-1 == ~expectedDirection~0); 130571#L230-1 assume !(1 == ~expectedDirection~0); 130566#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 130563#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 130561#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 130523#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 130516#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 130510#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 130508#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 130492#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 130475#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 130466#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 129535#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 127443#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 128169#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 124711#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 122830#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 122831#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 127980#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 130260#L2378-2 assume !(0 != timeShift_~tmp___9~3); 128583#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 128559#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 125728#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 125729#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123896#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 128302#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 124070#L2196-6 assume !(1 == ~currentHeading~0); 124071#L2206-18 assume !(0 == ~currentFloorID~0); 132661#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 132655#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 132647#L218-2 assume !(-1 == ~expectedDirection~0); 132612#L230-2 assume !(1 == ~expectedDirection~0); 132603#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 132596#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 132593#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 132590#L716-1 assume 0 == initPersonOnFloor_~floor; 132569#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 131642#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 131639#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 131640#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 136160#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 136159#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 136157#L87-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 136158#L88-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 136170#L98-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 136168#L1633-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 136146#L1654-34 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 136136#L103-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 127709#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 127710#L445-63 assume !(0 == isFloorCalling_~floorID); 129499#L449-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 136645#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 136644#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 136642#L1633-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 136638#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 136637#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 136636#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 136634#L2378-3 assume !(0 != timeShift_~tmp___9~3); 136633#L2469-9 assume !(1 == ~doorState~0); 136622#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 136620#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 136589#L1989-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 136583#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 136581#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 136582#L2196-9 assume !(1 == ~currentHeading~0); 136816#L2206-27 assume !(0 == ~currentFloorID~0); 136522#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 136517#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 136515#L218-3 assume !(-1 == ~expectedDirection~0); 136512#L230-3 assume !(1 == ~expectedDirection~0); 136510#L231-3 cleanup_~i~3 := 0; 136508#L2978-2 [2018-11-28 11:42:24,750 INFO L796 eck$LassoCheckResult]: Loop: 136508#L2978-2 assume !false; 136507#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 136506#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 136505#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 136504#L2986 assume 1 != cleanup_~tmp___0~10; 136503#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 136498#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 136488#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 136465#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 136434#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 136460#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 136459#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 136458#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 136457#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 136456#L87-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 136454#L88-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 136450#L98-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 136343#L1633-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 136337#L1654-45 __utac_acc__Specification3_spec__1_#t~ret3 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret3;havoc __utac_acc__Specification3_spec__1_#t~ret3; 136329#L103-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 127702#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 127703#L445-89 assume !(0 == isFloorCalling_~floorID); 136323#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 138541#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 138540#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 138539#L1633-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 138534#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 138533#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 138531#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 138528#L2378-4 assume !(0 != timeShift_~tmp___9~3); 138526#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 138524#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 138505#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 138493#L1989-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 138483#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 138481#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 138480#L2196-12 assume !(1 == ~currentHeading~0); 136320#L2206-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 128473#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 138471#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 138469#L218-4 assume !(-1 == ~expectedDirection~0); 138466#L230-4 assume !(1 == ~expectedDirection~0); 136509#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 136508#L2978-2 [2018-11-28 11:42:24,755 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:24,755 INFO L82 PathProgramCache]: Analyzing trace with hash -1923539896, now seen corresponding path program 1 times [2018-11-28 11:42:24,755 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:24,755 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:24,756 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:24,756 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:24,756 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:24,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:24,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:24,832 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:24,833 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:24,833 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:24,833 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:24,833 INFO L82 PathProgramCache]: Analyzing trace with hash -1757943809, now seen corresponding path program 1 times [2018-11-28 11:42:24,833 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:24,833 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:24,837 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:24,838 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:24,838 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:24,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:24,857 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:24,858 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:24,858 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:42:24,858 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:24,858 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:42:24,858 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:42:24,858 INFO L87 Difference]: Start difference. First operand 20211 states and 37881 transitions. cyclomatic complexity: 17671 Second operand 5 states. [2018-11-28 11:42:25,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:25,519 INFO L93 Difference]: Finished difference Result 39389 states and 73679 transitions. [2018-11-28 11:42:25,520 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 11:42:25,520 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39389 states and 73679 transitions. [2018-11-28 11:42:25,608 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8882 [2018-11-28 11:42:25,692 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39389 states to 39389 states and 73679 transitions. [2018-11-28 11:42:25,693 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39389 [2018-11-28 11:42:25,719 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39389 [2018-11-28 11:42:25,719 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39389 states and 73679 transitions. [2018-11-28 11:42:25,744 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:25,745 INFO L705 BuchiCegarLoop]: Abstraction has 39389 states and 73679 transitions. [2018-11-28 11:42:25,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39389 states and 73679 transitions. [2018-11-28 11:42:25,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39389 to 20211. [2018-11-28 11:42:25,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 20211 states. [2018-11-28 11:42:26,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20211 states to 20211 states and 37769 transitions. [2018-11-28 11:42:26,008 INFO L728 BuchiCegarLoop]: Abstraction has 20211 states and 37769 transitions. [2018-11-28 11:42:26,008 INFO L608 BuchiCegarLoop]: Abstraction has 20211 states and 37769 transitions. [2018-11-28 11:42:26,008 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-28 11:42:26,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20211 states and 37769 transitions. [2018-11-28 11:42:26,040 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4548 [2018-11-28 11:42:26,041 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:26,041 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:26,043 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:26,043 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:26,044 INFO L794 eck$LassoCheckResult]: Stem: 187109#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 187110#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 182829#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 182830#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 184104#L3172 assume 0 != main_~tmp~25; 183467#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 183468#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 185540#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 182359#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 183590#L716 assume 0 == initPersonOnFloor_~floor; 188579#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 182507#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 182783#L508 assume !(0 == callOnFloor_~floorID); 182340#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 182341#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 183857#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 183619#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 183620#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 188245#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 188247#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 194573#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 194528#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 194525#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 194524#L445 assume !(0 == isFloorCalling_~floorID); 194523#L449 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 194519#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 194518#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 184388#L1633-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 182942#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 182943#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 187596#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 194977#L2378 assume !(0 != timeShift_~tmp___9~3); 188130#L2469 assume !(1 == ~doorState~0); 188101#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 185378#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 185380#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 183305#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 183306#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 187839#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 183719#L2196 assume !(1 == ~currentHeading~0); 183720#L2206 assume !(0 == ~currentFloorID~0); 187897#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 187883#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 194864#L218 assume !(-1 == ~expectedDirection~0); 194861#L230 assume !(1 == ~expectedDirection~0); 194831#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 194816#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 194706#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 194705#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 194568#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 194426#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 194152#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 194141#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 194030#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 194024#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 193908#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 193906#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 190951#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 190946#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 190945#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 190943#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 190942#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 190940#L2378-1 assume !(0 != timeShift_~tmp___9~3); 190939#L2469-3 assume !(1 == ~doorState~0); 190938#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 190932#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 190933#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 190927#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 192897#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 192896#L2196-3 assume !(1 == ~currentHeading~0); 191112#L2206-9 assume !(0 == ~currentFloorID~0); 190312#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 190310#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 190307#L218-1 assume !(-1 == ~expectedDirection~0); 190304#L230-1 assume !(1 == ~expectedDirection~0); 190303#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 190302#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 190301#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 190299#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 190300#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 192913#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 192910#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 190187#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 190188#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 190196#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 190518#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 190514#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 190513#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 190511#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 190507#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 190505#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 190504#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 190502#L2378-2 assume !(0 != timeShift_~tmp___9~3); 190501#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 190500#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 190499#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 189726#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 189715#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 189713#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 189714#L2196-6 assume !(1 == ~currentHeading~0); 189027#L2206-18 assume !(0 == ~currentFloorID~0); 187863#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 189342#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 189340#L218-2 assume !(-1 == ~expectedDirection~0); 189337#L230-2 assume !(1 == ~expectedDirection~0); 189335#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 189331#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 189328#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 189327#L716-1 assume 0 == initPersonOnFloor_~floor; 189305#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 189292#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 189290#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 189291#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 195440#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 195439#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 195434#L87-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 195430#L88-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 188240#L1633-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 182456#L1654-33 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 182457#L92-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 195422#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 198252#L445-63 assume !(0 == isFloorCalling_~floorID); 188875#L449-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 186552#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 193827#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 193829#L1633-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 197996#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 197995#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 197994#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 197992#L2378-3 assume !(0 != timeShift_~tmp___9~3); 197991#L2469-9 assume !(1 == ~doorState~0); 197990#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 197988#L1820-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 197987#L1019-15 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 183510#L1824-6 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 183299#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 187831#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 183692#L2196-9 assume !(1 == ~currentHeading~0); 183693#L2206-27 assume !(0 == ~currentFloorID~0); 188016#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 197930#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 197929#L218-3 assume !(-1 == ~expectedDirection~0); 185679#L230-3 assume !(1 == ~expectedDirection~0); 185322#L231-3 cleanup_~i~3 := 0; 197072#L2978-2 [2018-11-28 11:42:26,044 INFO L796 eck$LassoCheckResult]: Loop: 197072#L2978-2 assume !false; 184196#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 184197#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 195431#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 195429#L2986 assume 1 != cleanup_~tmp___0~10; 195428#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 195427#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 195426#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 195313#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 195307#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 195305#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 195303#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 195301#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 195299#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 195295#L87-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 195267#L88-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 184603#L1633-44 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 182389#L1654-44 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 182390#L92-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 183244#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 195225#L445-89 assume !(0 == isFloorCalling_~floorID); 195222#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 195220#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 195217#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 195219#L1633-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 199968#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 199967#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 199966#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 199964#L2378-4 assume !(0 != timeShift_~tmp___9~3); 199963#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 199962#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 199961#L1820-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 199934#L1019-20 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 195007#L1824-8 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 183418#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 194989#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 194990#L2196-12 assume !(1 == ~currentHeading~0); 194992#L2206-36 assume !(0 == ~currentFloorID~0); 187989#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 187975#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 184942#L218-4 assume !(-1 == ~expectedDirection~0); 184811#L230-4 assume !(1 == ~expectedDirection~0); 197926#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 197072#L2978-2 [2018-11-28 11:42:26,049 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:26,050 INFO L82 PathProgramCache]: Analyzing trace with hash -357801372, now seen corresponding path program 1 times [2018-11-28 11:42:26,050 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:26,050 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:26,050 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:26,051 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:26,051 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:26,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:26,113 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:26,113 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:26,113 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:26,114 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:26,114 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:26,114 INFO L82 PathProgramCache]: Analyzing trace with hash -1692626219, now seen corresponding path program 1 times [2018-11-28 11:42:26,114 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:26,114 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:26,115 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:26,115 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:26,115 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:26,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:26,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:26,153 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:26,153 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-11-28 11:42:26,153 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:26,153 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-11-28 11:42:26,154 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-11-28 11:42:26,154 INFO L87 Difference]: Start difference. First operand 20211 states and 37769 transitions. cyclomatic complexity: 17559 Second operand 6 states. [2018-11-28 11:42:28,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:28,871 INFO L93 Difference]: Finished difference Result 39591 states and 73599 transitions. [2018-11-28 11:42:28,871 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-11-28 11:42:28,871 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39591 states and 73599 transitions. [2018-11-28 11:42:28,963 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9474 [2018-11-28 11:42:29,028 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39591 states to 39591 states and 73599 transitions. [2018-11-28 11:42:29,028 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39591 [2018-11-28 11:42:29,049 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39591 [2018-11-28 11:42:29,049 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39591 states and 73599 transitions. [2018-11-28 11:42:29,068 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:29,069 INFO L705 BuchiCegarLoop]: Abstraction has 39591 states and 73599 transitions. [2018-11-28 11:42:29,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39591 states and 73599 transitions. [2018-11-28 11:42:29,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39591 to 27627. [2018-11-28 11:42:29,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 27627 states. [2018-11-28 11:42:29,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27627 states to 27627 states and 51429 transitions. [2018-11-28 11:42:29,279 INFO L728 BuchiCegarLoop]: Abstraction has 27627 states and 51429 transitions. [2018-11-28 11:42:29,279 INFO L608 BuchiCegarLoop]: Abstraction has 27627 states and 51429 transitions. [2018-11-28 11:42:29,279 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-28 11:42:29,279 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27627 states and 51429 transitions. [2018-11-28 11:42:29,329 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6512 [2018-11-28 11:42:29,329 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:29,329 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:29,332 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:29,332 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:29,332 INFO L794 eck$LassoCheckResult]: Stem: 246871#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 246872#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 242658#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 242659#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 243929#L3172 assume 0 != main_~tmp~25; 243295#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 243296#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 245340#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 242190#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 243421#L716 assume 0 == initPersonOnFloor_~floor; 248449#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 242338#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 242613#L508 assume !(0 == callOnFloor_~floorID); 242171#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 242172#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 249356#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 249355#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 249354#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 249353#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 244268#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 242852#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 242853#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 248362#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 248363#L445 assume !(0 == isFloorCalling_~floorID); 248936#L449 assume !(1 == isFloorCalling_~floorID); 248937#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 247502#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 247503#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 244220#L1633-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 242770#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 242771#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 247359#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 248987#L2378 assume !(0 != timeShift_~tmp___9~3); 247941#L2469 assume !(1 == ~doorState~0); 247911#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 245175#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 245177#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 245639#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 249260#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 249259#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 249258#L2196 assume !(1 == ~currentHeading~0); 247697#L2206 assume !(0 == ~currentFloorID~0); 247698#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 249181#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 249180#L218 assume !(-1 == ~expectedDirection~0); 249178#L230 assume !(1 == ~expectedDirection~0); 249175#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 249173#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 249171#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 249169#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 249168#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 249167#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 249126#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 249103#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 249092#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 249086#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 249080#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 249081#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 249077#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 249071#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 249072#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 249066#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 249068#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 249055#L2378-1 assume !(0 != timeShift_~tmp___9~3); 249057#L2469-3 assume !(1 == ~doorState~0); 249040#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 249041#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 249017#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 248999#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 248993#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 248995#L2196-3 assume !(1 == ~currentHeading~0); 248989#L2206-9 assume !(0 == ~currentFloorID~0); 247680#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 247669#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 254922#L218-1 assume !(-1 == ~expectedDirection~0); 254918#L230-1 assume !(1 == ~expectedDirection~0); 254914#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 254910#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 254908#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 254904#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 254901#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 254898#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 254883#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 254875#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 254868#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 254865#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 254859#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 254854#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 254850#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 254852#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 254855#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 254853#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 254848#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 254849#L2378-2 assume !(0 != timeShift_~tmp___9~3); 269643#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 269639#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 269636#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 269623#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 269612#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 269610#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 269608#L2196-6 assume !(1 == ~currentHeading~0); 269605#L2206-18 assume !(0 == ~currentFloorID~0); 247675#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 247676#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 253179#L218-2 assume !(-1 == ~expectedDirection~0); 253175#L230-2 assume !(1 == ~expectedDirection~0); 253170#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 253163#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 253158#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 253151#L716-1 assume 0 == initPersonOnFloor_~floor; 253094#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 253080#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 253073#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 253068#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 253066#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 253064#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 253058#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 253050#L149-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 253051#L1633-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 265473#L1654-38 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 265471#L153-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 265472#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 269520#L445-63 assume !(0 == isFloorCalling_~floorID); 269519#L449-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 246332#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 247368#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 269510#L1633-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 269552#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 269511#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 269507#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 269508#L2378-3 assume !(0 != timeShift_~tmp___9~3); 247906#L2469-9 assume !(1 == ~doorState~0); 247907#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 269494#L1820-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 269492#L1019-15 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 243341#L1824-6 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 243123#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 247640#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 243525#L2196-9 assume !(1 == ~currentHeading~0); 243526#L2206-27 assume !(0 == ~currentFloorID~0); 247833#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 247804#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 244769#L218-3 assume !(-1 == ~expectedDirection~0); 244644#L230-3 assume !(1 == ~expectedDirection~0); 245116#L231-3 cleanup_~i~3 := 0; 242519#L2978-2 [2018-11-28 11:42:29,333 INFO L796 eck$LassoCheckResult]: Loop: 242519#L2978-2 assume !false; 242520#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 243858#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 243859#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 243736#L2986 assume 1 != cleanup_~tmp___0~10; 243737#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 248978#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 248979#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 245633#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 243078#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 245772#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 249666#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 249664#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 249661#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 249662#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 261243#L149-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 261212#L1633-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 261204#L1654-49 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 261195#L153-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 261192#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 261191#L445-89 assume !(0 == isFloorCalling_~floorID); 261188#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 261186#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 261185#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 261184#L1633-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 261179#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 261177#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 261176#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 261174#L2378-4 assume !(0 != timeShift_~tmp___9~3); 261173#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 261172#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 261170#L1820-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 261169#L1019-20 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 261123#L1824-8 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 256767#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 256839#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 256838#L2196-12 assume !(1 == ~currentHeading~0); 256837#L2206-36 assume !(0 == ~currentFloorID~0); 247791#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 247778#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 244767#L218-4 assume !(-1 == ~expectedDirection~0); 244639#L230-4 assume !(1 == ~expectedDirection~0); 245120#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 242519#L2978-2 [2018-11-28 11:42:29,337 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:29,337 INFO L82 PathProgramCache]: Analyzing trace with hash -936399486, now seen corresponding path program 1 times [2018-11-28 11:42:29,337 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:29,337 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:29,338 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:29,338 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:29,338 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:29,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:29,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:29,416 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:29,417 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:29,417 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:29,417 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:29,417 INFO L82 PathProgramCache]: Analyzing trace with hash -147049638, now seen corresponding path program 1 times [2018-11-28 11:42:29,417 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:29,417 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:29,418 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:29,418 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:29,418 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:29,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:29,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:29,445 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:29,445 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:42:29,445 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:29,445 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:42:29,446 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:42:29,446 INFO L87 Difference]: Start difference. First operand 27627 states and 51429 transitions. cyclomatic complexity: 23803 Second operand 5 states. [2018-11-28 11:42:32,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:32,975 INFO L93 Difference]: Finished difference Result 65773 states and 122841 transitions. [2018-11-28 11:42:32,975 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 11:42:32,976 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65773 states and 122841 transitions. [2018-11-28 11:42:33,131 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16864 [2018-11-28 11:42:33,474 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65773 states to 65773 states and 122841 transitions. [2018-11-28 11:42:33,474 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65773 [2018-11-28 11:42:33,497 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65773 [2018-11-28 11:42:33,497 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65773 states and 122841 transitions. [2018-11-28 11:42:33,518 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:33,519 INFO L705 BuchiCegarLoop]: Abstraction has 65773 states and 122841 transitions. [2018-11-28 11:42:33,537 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65773 states and 122841 transitions. [2018-11-28 11:42:33,750 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65773 to 27055. [2018-11-28 11:42:33,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 27055 states. [2018-11-28 11:42:33,777 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27055 states to 27055 states and 50403 transitions. [2018-11-28 11:42:33,777 INFO L728 BuchiCegarLoop]: Abstraction has 27055 states and 50403 transitions. [2018-11-28 11:42:33,777 INFO L608 BuchiCegarLoop]: Abstraction has 27055 states and 50403 transitions. [2018-11-28 11:42:33,777 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-11-28 11:42:33,778 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27055 states and 50403 transitions. [2018-11-28 11:42:33,823 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6369 [2018-11-28 11:42:33,823 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:33,823 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:33,825 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:33,825 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:33,826 INFO L794 eck$LassoCheckResult]: Stem: 340307#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 340308#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 336080#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 336081#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 337354#L3172 assume 0 != main_~tmp~25; 336725#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 336726#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 338784#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 335612#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 336847#L716 assume 0 == initPersonOnFloor_~floor; 341766#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 335760#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 336035#L508 assume !(0 == callOnFloor_~floorID); 335593#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 335594#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 341051#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 341052#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 341377#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 341378#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 337683#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 336705#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 341082#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 336383#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 341230#L445 assume !(0 == isFloorCalling_~floorID); 341231#L449 assume !(1 == isFloorCalling_~floorID); 341764#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 340135#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 343765#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 337635#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 337636#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 343738#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 343736#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 343735#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 343733#L2378 assume !(0 != timeShift_~tmp___9~3); 343732#L2469 assume !(1 == ~doorState~0); 343731#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 343729#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 343728#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 336561#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 336562#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 341034#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 336976#L2196 assume !(1 == ~currentHeading~0); 336977#L2206 assume !(0 == ~currentFloorID~0); 341089#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 343671#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 343669#L218 assume !(-1 == ~expectedDirection~0); 343666#L230 assume !(1 == ~expectedDirection~0); 343664#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 343663#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 343662#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 343660#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 343656#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 343654#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 343646#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 343632#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 343626#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 343620#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 343619#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 343618#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 343616#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 343617#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 344052#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 343614#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 343615#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 343606#L2378-1 assume !(0 != timeShift_~tmp___9~3); 341305#L2469-3 assume !(1 == ~doorState~0); 341306#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 338624#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 338625#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 350213#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 350205#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 350152#L2196-3 assume !(1 == ~currentHeading~0); 350151#L2206-9 assume !(0 == ~currentFloorID~0); 341088#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 342287#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 342277#L218-1 assume !(-1 == ~expectedDirection~0); 342278#L230-1 assume !(1 == ~expectedDirection~0); 342271#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 342272#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 342267#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 342268#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 346284#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 342266#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 342262#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 342258#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 342223#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 342220#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 342218#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 342217#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 342215#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 342212#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 342213#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 345676#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 345677#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 345668#L2378-2 assume !(0 != timeShift_~tmp___9~3); 345669#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 345995#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 345985#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 345974#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 345963#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 345961#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 345962#L2196-6 assume !(1 == ~currentHeading~0); 350150#L2206-18 assume !(0 == ~currentFloorID~0); 341061#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 344302#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 354828#L218-2 assume !(-1 == ~expectedDirection~0); 344290#L230-2 assume !(1 == ~expectedDirection~0); 344287#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 344288#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 354407#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 354406#L716-1 assume 0 == initPersonOnFloor_~floor; 344252#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 344240#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 344234#L508-2 assume !(0 == callOnFloor_~floorID); 344236#L511-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 344227#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 344228#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 344222#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 344223#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 354220#L149-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 344221#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 344217#L170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 344213#L181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 344181#L192-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 344178#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 344176#L445-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 344175#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 344173#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 344170#L1633-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 344171#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 352683#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 352684#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 352675#L2378-3 assume !(0 != timeShift_~tmp___9~3); 341293#L2469-9 assume !(1 == ~doorState~0); 341294#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 338598#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 338599#L1989-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 359973#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 359971#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 359972#L2196-9 assume !(1 == ~currentHeading~0); 362581#L2206-27 assume !(0 == ~currentFloorID~0); 341208#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 350425#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 350417#L218-3 assume !(-1 == ~expectedDirection~0); 350416#L230-3 assume !(1 == ~expectedDirection~0); 350398#L231-3 cleanup_~i~3 := 0; 350397#L2978-2 [2018-11-28 11:42:33,826 INFO L796 eck$LassoCheckResult]: Loop: 350397#L2978-2 assume !false; 350392#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 350393#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 350388#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 350389#L2986 assume 1 != cleanup_~tmp___0~10; 350383#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 350384#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 350361#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 350362#L1724 assume !(0 != anyStopRequested_~tmp___3~1); 356016#L1728 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 350320#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 350321#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 350311#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 350312#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 350208#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 350209#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 359554#L149-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 350198#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 350197#L170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 350196#L181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 350165#L192-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 350162#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 350161#L445-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 350160#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 350158#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 350155#L1633-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 350156#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 351216#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 351210#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 351208#L2378-4 assume !(0 != timeShift_~tmp___9~3); 341262#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 341263#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 338575#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 338576#L1989-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 362528#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 362526#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 362525#L2196-12 assume !(1 == ~currentHeading~0); 362524#L2206-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 341204#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 350426#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 350411#L218-4 assume !(-1 == ~expectedDirection~0); 350410#L230-4 assume !(1 == ~expectedDirection~0); 350396#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 350397#L2978-2 [2018-11-28 11:42:33,827 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:33,827 INFO L82 PathProgramCache]: Analyzing trace with hash 1780121872, now seen corresponding path program 1 times [2018-11-28 11:42:33,827 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:33,827 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:33,829 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:33,829 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:33,830 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:33,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:33,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:33,905 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:33,905 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:33,905 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:33,905 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:33,905 INFO L82 PathProgramCache]: Analyzing trace with hash 523871535, now seen corresponding path program 1 times [2018-11-28 11:42:33,906 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:33,906 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:33,906 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:33,906 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:33,906 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:33,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:33,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:33,927 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:33,927 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:42:33,927 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:33,927 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:42:33,927 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:42:33,928 INFO L87 Difference]: Start difference. First operand 27055 states and 50403 transitions. cyclomatic complexity: 23349 Second operand 5 states. [2018-11-28 11:42:35,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:35,249 INFO L93 Difference]: Finished difference Result 122283 states and 229418 transitions. [2018-11-28 11:42:35,250 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 11:42:35,250 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 122283 states and 229418 transitions. [2018-11-28 11:42:35,556 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31296 [2018-11-28 11:42:35,785 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 122283 states to 122283 states and 229418 transitions. [2018-11-28 11:42:35,785 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 122283 [2018-11-28 11:42:35,854 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 122283 [2018-11-28 11:42:35,855 INFO L73 IsDeterministic]: Start isDeterministic. Operand 122283 states and 229418 transitions. [2018-11-28 11:42:35,908 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:35,909 INFO L705 BuchiCegarLoop]: Abstraction has 122283 states and 229418 transitions. [2018-11-28 11:42:35,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122283 states and 229418 transitions. [2018-11-28 11:42:36,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122283 to 52887. [2018-11-28 11:42:36,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 52887 states. [2018-11-28 11:42:36,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52887 states to 52887 states and 98571 transitions. [2018-11-28 11:42:36,453 INFO L728 BuchiCegarLoop]: Abstraction has 52887 states and 98571 transitions. [2018-11-28 11:42:36,453 INFO L608 BuchiCegarLoop]: Abstraction has 52887 states and 98571 transitions. [2018-11-28 11:42:36,453 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-11-28 11:42:36,453 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52887 states and 98571 transitions. [2018-11-28 11:42:36,697 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12484 [2018-11-28 11:42:36,697 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:36,697 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:36,699 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:36,699 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:36,699 INFO L794 eck$LassoCheckResult]: Stem: 489633#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 489634#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 485439#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 485440#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 486683#L3172 assume 0 != main_~tmp~25; 486061#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 486062#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 488116#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 484972#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 486187#L716 assume 0 == initPersonOnFloor_~floor; 491181#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 485120#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 485395#L508 assume !(0 == callOnFloor_~floorID); 484953#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 484954#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 492188#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 492187#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 492185#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 492186#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 492218#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 492241#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 492161#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 492155#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 492154#L445 assume !(0 == isFloorCalling_~floorID); 492153#L449 assume !(1 == isFloorCalling_~floorID); 492117#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 492116#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 492115#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 492114#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 492113#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 492109#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 492107#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 492106#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 492104#L2378 assume !(0 != timeShift_~tmp___9~3); 492103#L2469 assume !(1 == ~doorState~0); 492102#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 492101#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 488408#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 488409#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 491958#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 491955#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 491950#L2196 assume !(1 == ~currentHeading~0); 491944#L2206 assume !(0 == ~currentFloorID~0); 491939#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 491936#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 491934#L218 assume !(-1 == ~expectedDirection~0); 491931#L230 assume !(1 == ~expectedDirection~0); 491929#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 491928#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 491926#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 491920#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 491913#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 491907#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 491905#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 491890#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 491883#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 491877#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 491875#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 491874#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 491872#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 491865#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 491866#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 493596#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 493595#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 493593#L2378-1 assume !(0 != timeShift_~tmp___9~3); 493592#L2469-3 assume !(1 == ~doorState~0); 493591#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 493590#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 491787#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 491769#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 491758#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 491760#L2196-3 assume !(1 == ~currentHeading~0); 495881#L2206-9 assume !(0 == ~currentFloorID~0); 495882#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 498726#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 511629#L218-1 assume !(-1 == ~expectedDirection~0); 511626#L230-1 assume !(1 == ~expectedDirection~0); 511625#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 511624#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 511623#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 511621#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 511618#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 493456#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 493452#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 493448#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 493400#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 493369#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 493327#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 493311#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 493307#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 493301#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 493296#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 493293#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 493291#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 493287#L2378-2 assume !(0 != timeShift_~tmp___9~3); 493285#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 493283#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 493279#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 493269#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 493259#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 493240#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 486273#L2196-6 assume !(1 == ~currentHeading~0); 486274#L2206-18 assume !(0 == ~currentFloorID~0); 505004#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 505001#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 504999#L218-2 assume !(-1 == ~expectedDirection~0); 504996#L230-2 assume !(1 == ~expectedDirection~0); 504994#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 504990#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 504987#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 504986#L716-1 assume 0 == initPersonOnFloor_~floor; 504964#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 504951#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 504949#L508-2 assume !(0 == callOnFloor_~floorID); 504948#L511-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 504944#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 504943#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 504942#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 504940#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 504941#L149-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 532551#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 499858#L170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 499857#L181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 498547#L192-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 493221#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 493193#L445-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 493178#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 493153#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 493151#L1633-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 493143#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 493130#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 493126#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 493123#L2378-3 assume !(0 != timeShift_~tmp___9~3); 493114#L2469-9 assume !(1 == ~doorState~0); 493095#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 493096#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 492870#L1989-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 492862#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 492853#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 492854#L2196-9 assume !(1 == ~currentHeading~0); 492587#L2206-27 assume !(0 == ~currentFloorID~0); 492588#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 500956#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 500953#L218-3 assume !(-1 == ~expectedDirection~0); 500947#L230-3 assume !(1 == ~expectedDirection~0); 500942#L231-3 cleanup_~i~3 := 0; 500940#L2978-2 [2018-11-28 11:42:36,699 INFO L796 eck$LassoCheckResult]: Loop: 500940#L2978-2 assume !false; 500939#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 500938#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 500937#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 500936#L2986 assume 1 != cleanup_~tmp___0~10; 500935#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 500933#L445-84 assume !(0 == isFloorCalling_~floorID); 500934#L449-84 assume !(1 == isFloorCalling_~floorID); 500929#L453-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 500930#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 501252#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 501247#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 501246#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 501245#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 501244#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 501243#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 501241#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 501240#L149-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 493435#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 493432#L170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 493430#L181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 493422#L192-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 492808#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 492797#L445-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 492787#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 492782#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 492781#L1633-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 492776#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 492773#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 492770#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 492766#L2378-4 assume !(0 != timeShift_~tmp___9~3); 492763#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 492756#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 492666#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 492626#L1989-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 492614#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 492572#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 492574#L2196-12 assume !(1 == ~currentHeading~0); 498537#L2206-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 498538#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 500955#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 500950#L218-4 assume !(-1 == ~expectedDirection~0); 500944#L230-4 assume !(1 == ~expectedDirection~0); 500941#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 500940#L2978-2 [2018-11-28 11:42:36,700 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:36,701 INFO L82 PathProgramCache]: Analyzing trace with hash 1780121872, now seen corresponding path program 2 times [2018-11-28 11:42:36,701 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:36,703 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:36,703 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:36,703 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:36,704 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:36,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:36,782 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:36,782 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:36,782 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:36,782 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:36,782 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:36,783 INFO L82 PathProgramCache]: Analyzing trace with hash -794083935, now seen corresponding path program 1 times [2018-11-28 11:42:36,783 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:36,783 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:36,783 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:36,783 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 11:42:36,783 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:36,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:36,808 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:36,809 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:36,809 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 11:42:36,809 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:36,809 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 11:42:36,809 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 11:42:36,809 INFO L87 Difference]: Start difference. First operand 52887 states and 98571 transitions. cyclomatic complexity: 45685 Second operand 3 states. [2018-11-28 11:42:37,383 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:37,383 INFO L93 Difference]: Finished difference Result 57439 states and 106815 transitions. [2018-11-28 11:42:37,388 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 11:42:37,388 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57439 states and 106815 transitions. [2018-11-28 11:42:37,524 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12858 [2018-11-28 11:42:37,623 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57439 states to 57439 states and 106815 transitions. [2018-11-28 11:42:37,624 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57439 [2018-11-28 11:42:37,653 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57439 [2018-11-28 11:42:37,653 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57439 states and 106815 transitions. [2018-11-28 11:42:37,679 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:37,679 INFO L705 BuchiCegarLoop]: Abstraction has 57439 states and 106815 transitions. [2018-11-28 11:42:37,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57439 states and 106815 transitions. [2018-11-28 11:42:37,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57439 to 52351. [2018-11-28 11:42:37,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 52351 states. [2018-11-28 11:42:38,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52351 states to 52351 states and 97563 transitions. [2018-11-28 11:42:38,014 INFO L728 BuchiCegarLoop]: Abstraction has 52351 states and 97563 transitions. [2018-11-28 11:42:38,014 INFO L608 BuchiCegarLoop]: Abstraction has 52351 states and 97563 transitions. [2018-11-28 11:42:38,014 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-11-28 11:42:38,014 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52351 states and 97563 transitions. [2018-11-28 11:42:38,106 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12188 [2018-11-28 11:42:38,106 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:38,106 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:38,108 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:38,108 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:38,109 INFO L794 eck$LassoCheckResult]: Stem: 599929#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 599930#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 595775#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 595776#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 597037#L3172 assume 0 != main_~tmp~25; 596407#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 596408#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 598444#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 595306#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 596537#L716 assume 0 == initPersonOnFloor_~floor; 601348#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 595454#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 595729#L508 assume !(0 == callOnFloor_~floorID); 595287#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 595288#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 632060#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 632059#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 632057#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 632058#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 632068#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 632091#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 632033#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 632027#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 632026#L445 assume !(0 == isFloorCalling_~floorID); 632025#L449 assume !(1 == isFloorCalling_~floorID); 632022#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 632021#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 632020#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 632019#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 632018#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 632014#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 632013#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 632012#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 632011#L2378 assume !(0 != timeShift_~tmp___9~3); 632010#L2469 assume !(1 == ~doorState~0); 632009#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 632008#L1820 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 598727#L1019 stopRequestedInDirection_#t~ret63 := isTopFloor_#res;stopRequestedInDirection_~tmp~11 := stopRequestedInDirection_#t~ret63;havoc stopRequestedInDirection_#t~ret63; 596243#L1824 assume 0 != stopRequestedInDirection_~tmp~11;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 596244#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 600647#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 596668#L2196 assume !(1 == ~currentHeading~0); 596669#L2206 assume !(0 == ~currentFloorID~0); 600694#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 600687#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 644398#L218 assume !(-1 == ~expectedDirection~0); 644395#L230 assume !(1 == ~expectedDirection~0); 644393#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 644392#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 644391#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 644388#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 644384#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 644385#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 646289#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 646290#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 601325#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 597276#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 646992#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 600601#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 599203#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 597283#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 595812#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 595813#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 600386#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 644276#L2378-1 assume !(0 != timeShift_~tmp___9~3); 600898#L2469-3 assume !(1 == ~doorState~0); 600899#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 598284#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 598285#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 596431#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 600655#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 601625#L2196-3 assume !(1 == ~currentHeading~0); 647100#L2206-9 assume !(0 == ~currentFloorID~0); 600676#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 600667#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 644504#L218-1 assume !(-1 == ~expectedDirection~0); 644501#L230-1 assume !(1 == ~expectedDirection~0); 644500#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 644499#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 644498#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 644497#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 632404#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 632362#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 632358#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 632355#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 632330#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 632320#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 632319#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 632318#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 632276#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 632278#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 632284#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 632279#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 632273#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 632274#L2378-2 assume !(0 != timeShift_~tmp___9~3); 641768#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 641750#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 641739#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 632748#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 632737#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 632735#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 632736#L2196-6 assume !(1 == ~currentHeading~0); 632645#L2206-18 assume !(0 == ~currentFloorID~0); 632644#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 627263#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 627261#L218-2 assume !(-1 == ~expectedDirection~0); 627249#L230-2 assume !(1 == ~expectedDirection~0); 627247#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 627239#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 627230#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 627225#L716-1 assume 0 == initPersonOnFloor_~floor; 627200#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 627187#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 627184#L508-2 assume !(0 == callOnFloor_~floorID); 627182#L511-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 627176#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 627174#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 627173#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 627171#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 619370#L149-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 619371#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 619744#L170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 619745#L181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 627108#L192-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 619670#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 619668#L445-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 619667#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 619666#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 619664#L1633-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 619660#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 619658#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 619657#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 619656#L2378-3 assume !(0 != timeShift_~tmp___9~3); 619655#L2469-9 assume !(1 == ~doorState~0); 619650#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 619648#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 619579#L1989-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 619542#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 619575#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 619486#L2196-9 assume !(1 == ~currentHeading~0); 619479#L2206-27 assume !(0 == ~currentFloorID~0); 619419#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 601807#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 601808#L218-3 assume !(-1 == ~expectedDirection~0); 602835#L230-3 assume !(1 == ~expectedDirection~0); 602834#L231-3 cleanup_~i~3 := 0; 602832#L2978-2 [2018-11-28 11:42:38,109 INFO L796 eck$LassoCheckResult]: Loop: 602832#L2978-2 assume !false; 602831#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 601781#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 601782#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 602516#L2986 assume 1 != cleanup_~tmp___0~10; 602465#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 602449#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 602446#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 602441#L1724 assume !(0 != anyStopRequested_~tmp___3~1); 602438#L1728 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 602396#L445-85 assume !(0 == isFloorCalling_~floorID); 602389#L449-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 602387#L472-85 anyStopRequested_#t~ret58 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret58;havoc anyStopRequested_#t~ret58; 602291#L1735 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 602284#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 602274#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 602275#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 602267#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 602268#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 601972#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 601973#L149-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 601957#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 601943#L170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 601934#L181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 601926#L192-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 601923#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 601921#L445-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 601920#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 601919#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 601918#L1633-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 601912#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 601908#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 601905#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 601899#L2378-4 assume !(0 != timeShift_~tmp___9~3); 601894#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 601886#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 601874#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 601863#L1989-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 601847#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 601837#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 601829#L2196-12 assume !(1 == ~currentHeading~0); 601820#L2206-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 601809#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 601810#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 602840#L218-4 assume !(-1 == ~expectedDirection~0); 602837#L230-4 assume !(1 == ~expectedDirection~0); 602833#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 602832#L2978-2 [2018-11-28 11:42:38,113 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:38,113 INFO L82 PathProgramCache]: Analyzing trace with hash 1780121872, now seen corresponding path program 3 times [2018-11-28 11:42:38,113 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:38,113 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:38,114 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:38,114 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:38,114 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:38,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:38,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:38,173 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:38,173 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:38,173 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:38,173 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:38,173 INFO L82 PathProgramCache]: Analyzing trace with hash 1025903783, now seen corresponding path program 1 times [2018-11-28 11:42:38,173 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:38,173 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:38,174 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:38,174 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-28 11:42:38,174 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:38,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:38,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:38,199 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:38,199 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:38,199 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:38,199 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 11:42:38,199 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 11:42:38,199 INFO L87 Difference]: Start difference. First operand 52351 states and 97563 transitions. cyclomatic complexity: 45213 Second operand 4 states. [2018-11-28 11:42:38,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:38,577 INFO L93 Difference]: Finished difference Result 96665 states and 180527 transitions. [2018-11-28 11:42:38,578 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 11:42:38,578 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 96665 states and 180527 transitions. [2018-11-28 11:42:38,803 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23322 [2018-11-28 11:42:38,969 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 96665 states to 96665 states and 180527 transitions. [2018-11-28 11:42:38,969 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 96665 [2018-11-28 11:42:39,020 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 96665 [2018-11-28 11:42:39,020 INFO L73 IsDeterministic]: Start isDeterministic. Operand 96665 states and 180527 transitions. [2018-11-28 11:42:39,062 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:39,062 INFO L705 BuchiCegarLoop]: Abstraction has 96665 states and 180527 transitions. [2018-11-28 11:42:39,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96665 states and 180527 transitions. [2018-11-28 11:42:39,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96665 to 52403. [2018-11-28 11:42:39,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 52403 states. [2018-11-28 11:42:39,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52403 states to 52403 states and 97615 transitions. [2018-11-28 11:42:39,862 INFO L728 BuchiCegarLoop]: Abstraction has 52403 states and 97615 transitions. [2018-11-28 11:42:39,862 INFO L608 BuchiCegarLoop]: Abstraction has 52403 states and 97615 transitions. [2018-11-28 11:42:39,862 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-11-28 11:42:39,862 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52403 states and 97615 transitions. [2018-11-28 11:42:39,955 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12200 [2018-11-28 11:42:39,956 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:39,956 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:39,958 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:39,958 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:39,958 INFO L794 eck$LassoCheckResult]: Stem: 749086#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 749087#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 744803#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 744804#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 746083#L3172 assume 0 != main_~tmp~25; 745446#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 745447#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 747550#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 744339#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 745577#L716 assume 0 == initPersonOnFloor_~floor; 750649#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 744484#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 744757#L508 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 744758#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 752266#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 752265#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 752263#L87 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 752262#L88 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 752256#L1633 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 744993#L1654 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 744994#L92 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 750571#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 750572#L445 assume !(0 == isFloorCalling_~floorID); 751091#L449 assume !(1 == isFloorCalling_~floorID); 751092#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 749713#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 749714#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 746412#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 746413#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 744918#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 744919#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 751139#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 751140#L2378 assume !(0 != timeShift_~tmp___9~3); 750168#L2469 assume !(1 == ~doorState~0); 750169#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 752235#L1820 assume !(1 == stopRequestedInDirection_~dir); 747826#L1989 assume !(0 == ~currentFloorID~0); 747827#L1995 assume !(~currentFloorID~0 > 0); 746196#L2010 assume ~currentFloorID~0 > 0; 746197#L2012 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 746006#L2013 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 746007#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 751716#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 745705#L2196 assume !(1 == ~currentHeading~0); 745706#L2206 assume !(0 == ~currentFloorID~0); 749918#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 749900#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 758465#L218 assume !(-1 == ~expectedDirection~0); 758420#L230 assume !(1 == ~expectedDirection~0); 757534#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 757533#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 757531#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 757527#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 757524#L149-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 757525#L1633-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 758441#L1654-16 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 758434#L153-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 758430#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 758429#L445-21 assume !(0 == isFloorCalling_~floorID); 758426#L449-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 756210#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 756203#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 756201#L1633-21 assume !(0 == buttonForFloorIsPressed_~floorID); 756088#L1637-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 756085#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 756081#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 756067#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 752862#L2378-1 assume !(0 != timeShift_~tmp___9~3); 752848#L2469-3 assume !(1 == ~doorState~0); 752796#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 752795#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 747818#L1989-2 assume !(0 == ~currentFloorID~0); 747819#L1995-2 assume !(~currentFloorID~0 > 0); 746185#L2010-2 assume ~currentFloorID~0 > 0; 746187#L2012-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 746011#L2013-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 746012#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 753423#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 745715#L2196-3 assume !(1 == ~currentHeading~0); 745716#L2206-9 assume !(0 == ~currentFloorID~0); 749892#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 749881#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 768730#L218-1 assume !(-1 == ~expectedDirection~0); 768691#L230-1 assume !(1 == ~expectedDirection~0); 768692#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 774170#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 774169#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 774168#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 774167#L149-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 774150#L1633-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 774142#L1654-27 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 774134#L153-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 774133#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 774132#L445-42 assume !(0 == isFloorCalling_~floorID); 774129#L449-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 774131#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 778596#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 778597#L1633-32 assume !(0 == buttonForFloorIsPressed_~floorID); 747876#L1637-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 745121#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 778598#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 778599#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 778588#L2378-2 assume !(0 != timeShift_~tmp___9~3); 751671#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 751550#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 751547#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 751543#L1989-4 assume !(0 == ~currentFloorID~0); 751542#L1995-4 assume !(~currentFloorID~0 > 0); 746188#L2010-4 assume ~currentFloorID~0 > 0; 746190#L2012-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 745965#L2013-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 745366#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 769039#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 745662#L2196-6 assume !(1 == ~currentHeading~0); 745663#L2206-18 assume !(0 == ~currentFloorID~0); 749888#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 749889#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 795222#L218-2 assume !(-1 == ~expectedDirection~0); 795219#L230-2 assume !(1 == ~expectedDirection~0); 795217#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 795213#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 795210#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 795208#L716-1 assume 0 == initPersonOnFloor_~floor; 795147#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 795134#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 795132#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 752651#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 775668#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 775667#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 774337#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 772976#L149-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 772977#L1633-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 795469#L1654-38 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 795128#L153-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 793423#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 796705#L445-63 assume !(0 == isFloorCalling_~floorID); 794623#L449-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 794615#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 794611#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 794612#L1633-43 assume !(0 == buttonForFloorIsPressed_~floorID); 794619#L1637-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 794614#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 794613#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 794610#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 794607#L2378-3 assume !(0 != timeShift_~tmp___9~3); 751666#L2469-9 assume !(1 == ~doorState~0); 751667#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 795709#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 795708#L1989-6 assume !(0 == ~currentFloorID~0); 795707#L1995-6 assume !(~currentFloorID~0 > 0); 745258#L2010-6 assume ~currentFloorID~0 > 0; 795717#L2012-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 745967#L2013-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 745257#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 752612#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 752613#L2196-9 assume !(1 == ~currentHeading~0); 750035#L2206-27 assume !(0 == ~currentFloorID~0); 750036#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 795687#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 795685#L218-3 assume !(-1 == ~expectedDirection~0); 795682#L230-3 assume !(1 == ~expectedDirection~0); 795680#L231-3 cleanup_~i~3 := 0; 795678#L2978-2 [2018-11-28 11:42:39,959 INFO L796 eck$LassoCheckResult]: Loop: 795678#L2978-2 assume !false; 795677#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 795676#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 795675#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 745891#L2986 assume 1 != cleanup_~tmp___0~10; 745860#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 745861#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 749505#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 747847#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 747848#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 747155#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 747156#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 792449#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 792447#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 792445#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 792435#L149-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 789194#L1633-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 789190#L1654-49 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 789161#L153-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 789160#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 789159#L445-89 assume !(0 == isFloorCalling_~floorID); 789156#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 789150#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 789146#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 789147#L1633-54 assume !(0 == buttonForFloorIsPressed_~floorID); 789152#L1637-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 789149#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 789148#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 789145#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 789142#L2378-4 assume !(0 != timeShift_~tmp___9~3); 751791#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 751717#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 751709#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 751710#L1989-8 assume !(0 == ~currentFloorID~0); 796013#L1995-8 assume !(~currentFloorID~0 > 0); 745485#L2010-8 assume ~currentFloorID~0 > 0; 795983#L2012-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 745988#L2013-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 745484#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 769440#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 769441#L2196-12 assume !(1 == ~currentHeading~0); 750030#L2206-36 assume !(0 == ~currentFloorID~0); 750031#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 795951#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 795949#L218-4 assume !(-1 == ~expectedDirection~0); 795946#L230-4 assume !(1 == ~expectedDirection~0); 795679#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 795678#L2978-2 [2018-11-28 11:42:39,964 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:39,964 INFO L82 PathProgramCache]: Analyzing trace with hash 1191077286, now seen corresponding path program 1 times [2018-11-28 11:42:39,964 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:39,965 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:39,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:39,965 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:39,965 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:39,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:40,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:40,022 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:40,022 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:40,022 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:40,022 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:40,022 INFO L82 PathProgramCache]: Analyzing trace with hash 1552488081, now seen corresponding path program 1 times [2018-11-28 11:42:40,022 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:40,022 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:40,023 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:40,023 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:40,023 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:40,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:40,051 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:40,051 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:40,051 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:42:40,051 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:40,051 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:42:40,051 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:42:40,052 INFO L87 Difference]: Start difference. First operand 52403 states and 97615 transitions. cyclomatic complexity: 45213 Second operand 5 states. [2018-11-28 11:42:41,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:41,029 INFO L93 Difference]: Finished difference Result 68959 states and 127997 transitions. [2018-11-28 11:42:41,029 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 11:42:41,029 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 68959 states and 127997 transitions. [2018-11-28 11:42:41,192 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16396 [2018-11-28 11:42:41,314 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 68959 states to 68959 states and 127997 transitions. [2018-11-28 11:42:41,314 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 68959 [2018-11-28 11:42:41,351 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 68959 [2018-11-28 11:42:41,351 INFO L73 IsDeterministic]: Start isDeterministic. Operand 68959 states and 127997 transitions. [2018-11-28 11:42:41,381 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:41,381 INFO L705 BuchiCegarLoop]: Abstraction has 68959 states and 127997 transitions. [2018-11-28 11:42:41,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68959 states and 127997 transitions. [2018-11-28 11:42:41,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68959 to 68481. [2018-11-28 11:42:41,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 68481 states. [2018-11-28 11:42:41,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68481 states to 68481 states and 127267 transitions. [2018-11-28 11:42:41,809 INFO L728 BuchiCegarLoop]: Abstraction has 68481 states and 127267 transitions. [2018-11-28 11:42:41,809 INFO L608 BuchiCegarLoop]: Abstraction has 68481 states and 127267 transitions. [2018-11-28 11:42:41,809 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-11-28 11:42:41,809 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 68481 states and 127267 transitions. [2018-11-28 11:42:41,928 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16258 [2018-11-28 11:42:41,928 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:41,928 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:41,930 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:41,931 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:41,931 INFO L794 eck$LassoCheckResult]: Stem: 870375#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 870376#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 866177#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 866178#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 867449#L3172 assume 0 != main_~tmp~25; 866812#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 866813#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 868867#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 865714#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 866947#L716 assume 0 == initPersonOnFloor_~floor; 871813#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 865856#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 866131#L508 assume !(0 == callOnFloor_~floorID); 865695#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 865696#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 879734#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 879733#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 879731#L87 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 879732#L149 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 879743#L1633-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 866330#L1654-5 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 866331#L153 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 879709#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 879708#L445 assume !(0 == isFloorCalling_~floorID); 879707#L449 assume !(1 == isFloorCalling_~floorID); 879704#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 879702#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 879700#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 867739#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 867740#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 879668#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 879667#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 879666#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 879665#L2378 assume !(0 != timeShift_~tmp___9~3); 879664#L2469 assume !(1 == ~doorState~0); 871323#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 868705#L1820 assume !(1 == stopRequestedInDirection_~dir); 868706#L1989 assume !(0 == ~currentFloorID~0); 869143#L1995 assume ~currentFloorID~0 > 0; 879627#L1996 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 871243#L445-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 870948#L472-6 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 870949#L2000 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 866771#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 872259#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 872280#L2196 assume !(1 == ~currentHeading~0); 880435#L2206 assume !(0 == ~currentFloorID~0); 880433#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 880420#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 880417#L218 assume !(-1 == ~expectedDirection~0); 880413#L230 assume !(1 == ~expectedDirection~0); 880411#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 880410#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 880406#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 880403#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 880400#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 880397#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 880395#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 880393#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 880161#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 880155#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 880152#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 880151#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 880148#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 880135#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 880132#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 880130#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 880128#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 880126#L2378-1 assume !(0 != timeShift_~tmp___9~3); 880123#L2469-3 assume !(1 == ~doorState~0); 880122#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 880120#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 880118#L1989-2 assume !(0 == ~currentFloorID~0); 880119#L1995-2 assume ~currentFloorID~0 > 0; 880929#L1996-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 880331#L445-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 880327#L472-27 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 880067#L2000-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 880059#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 880057#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 879909#L2196-3 assume !(1 == ~currentHeading~0); 879884#L2206-9 assume !(0 == ~currentFloorID~0); 879872#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 879867#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 886985#L218-1 assume !(-1 == ~expectedDirection~0); 886982#L230-1 assume !(1 == ~expectedDirection~0); 886980#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 886979#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 886978#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 886977#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 886975#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 874623#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 874595#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 874545#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 874528#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 874513#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 874505#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 874503#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 873575#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 873325#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 873321#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 873313#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 873277#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 873264#L2378-2 assume !(0 != timeShift_~tmp___9~3); 873259#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 873252#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 873053#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 872700#L1989-4 assume !(0 == ~currentFloorID~0); 872701#L1995-4 assume !(~currentFloorID~0 > 0); 873234#L2010-4 assume ~currentFloorID~0 > 0; 872994#L2012-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 872992#L2013-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 872993#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 905606#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 905607#L2196-6 assume !(1 == ~currentHeading~0); 912676#L2206-18 assume !(0 == ~currentFloorID~0); 912675#L2206-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 912668#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 912666#L218-2 assume !(-1 == ~expectedDirection~0); 912663#L230-2 assume !(1 == ~expectedDirection~0); 912661#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 912657#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 912654#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 912653#L716-1 assume 0 == initPersonOnFloor_~floor; 912632#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 912619#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 912617#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 912618#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 922160#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 922158#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 922156#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 922157#L149-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 922208#L1633-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 922205#L1654-38 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 922131#L153-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 922130#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 922129#L445-63 assume !(0 == isFloorCalling_~floorID); 922128#L449-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 869844#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 869639#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 867945#L1633-43 assume !(0 == buttonForFloorIsPressed_~floorID); 867946#L1637-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 866471#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 921396#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 921397#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 893174#L2378-3 assume !(0 != timeShift_~tmp___9~3); 871319#L2469-9 assume !(1 == ~doorState~0); 871320#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 868682#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 868683#L1989-6 assume !(0 == ~currentFloorID~0); 869140#L1995-6 assume ~currentFloorID~0 > 0; 868699#L1996-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 866637#L2010-6 assume ~currentFloorID~0 > 0; 867523#L2012-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 867337#L2013-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 866636#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 933918#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 867050#L2196-9 assume !(1 == ~currentHeading~0); 867051#L2206-27 assume !(0 == ~currentFloorID~0); 871235#L2206-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 871222#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 868285#L218-3 assume !(-1 == ~expectedDirection~0); 868159#L230-3 assume !(1 == ~expectedDirection~0); 868648#L231-3 cleanup_~i~3 := 0; 866037#L2978-2 [2018-11-28 11:42:41,931 INFO L796 eck$LassoCheckResult]: Loop: 866037#L2978-2 assume !false; 866038#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 867377#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 867378#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 867265#L2986 assume 1 != cleanup_~tmp___0~10; 867233#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 867234#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 870790#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 869162#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 869163#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 934116#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 934112#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 934109#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 934107#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 934105#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 931241#L149-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 918513#L1633-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 931231#L1654-49 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 931229#L153-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 870735#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 872214#L445-89 assume !(0 == isFloorCalling_~floorID); 871852#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 869736#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 869653#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 867892#L1633-54 assume !(0 == buttonForFloorIsPressed_~floorID); 867893#L1637-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 866605#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 928374#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 928375#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 898077#L2378-4 assume !(0 != timeShift_~tmp___9~3); 898076#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 898075#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 898074#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 869216#L1989-8 assume !(0 == ~currentFloorID~0); 868896#L1995-8 assume ~currentFloorID~0 > 0; 868669#L1996-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 866852#L2010-8 assume ~currentFloorID~0 > 0; 867525#L2012-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 867356#L2013-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 866758#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 896415#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 896407#L2196-12 assume !(1 == ~currentHeading~0); 896405#L2206-36 assume !(0 == ~currentFloorID~0); 871211#L2206-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 871198#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 934168#L218-4 assume !(-1 == ~expectedDirection~0); 869000#L230-4 assume !(1 == ~expectedDirection~0); 868654#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 866037#L2978-2 [2018-11-28 11:42:41,938 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:41,938 INFO L82 PathProgramCache]: Analyzing trace with hash -16778553, now seen corresponding path program 1 times [2018-11-28 11:42:41,938 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:41,938 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:41,938 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:41,938 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:41,939 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:41,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:42,030 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:42,030 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:42,030 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:42,030 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:42,030 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:42,031 INFO L82 PathProgramCache]: Analyzing trace with hash 1295524629, now seen corresponding path program 1 times [2018-11-28 11:42:42,031 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:42,031 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:42,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:42,031 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:42,031 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:42,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:42,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:42,058 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:42,058 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:42,058 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:42,059 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 11:42:42,059 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 11:42:42,059 INFO L87 Difference]: Start difference. First operand 68481 states and 127267 transitions. cyclomatic complexity: 58787 Second operand 4 states. [2018-11-28 11:42:42,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:42,875 INFO L93 Difference]: Finished difference Result 89101 states and 164265 transitions. [2018-11-28 11:42:42,875 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2018-11-28 11:42:42,875 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 89101 states and 164265 transitions. [2018-11-28 11:42:43,103 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 20732 [2018-11-28 11:42:43,264 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 89101 states to 89101 states and 164265 transitions. [2018-11-28 11:42:43,265 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 89101 [2018-11-28 11:42:43,317 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 89101 [2018-11-28 11:42:43,317 INFO L73 IsDeterministic]: Start isDeterministic. Operand 89101 states and 164265 transitions. [2018-11-28 11:42:43,359 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:43,359 INFO L705 BuchiCegarLoop]: Abstraction has 89101 states and 164265 transitions. [2018-11-28 11:42:43,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89101 states and 164265 transitions. [2018-11-28 11:42:45,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89101 to 68481. [2018-11-28 11:42:45,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 68481 states. [2018-11-28 11:42:46,060 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68481 states to 68481 states and 126739 transitions. [2018-11-28 11:42:46,060 INFO L728 BuchiCegarLoop]: Abstraction has 68481 states and 126739 transitions. [2018-11-28 11:42:46,060 INFO L608 BuchiCegarLoop]: Abstraction has 68481 states and 126739 transitions. [2018-11-28 11:42:46,060 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-11-28 11:42:46,060 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 68481 states and 126739 transitions. [2018-11-28 11:42:46,178 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16258 [2018-11-28 11:42:46,178 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:46,178 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:46,181 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:46,182 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:46,182 INFO L794 eck$LassoCheckResult]: Stem: 1027966#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 1027967#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 1023761#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 1023762#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 1025033#L3172 assume 0 != main_~tmp~25; 1024401#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1024402#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1026470#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1023308#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1024536#L716 assume 0 == initPersonOnFloor_~floor; 1029456#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1023443#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1023717#L508 assume !(0 == callOnFloor_~floorID); 1023289#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1023290#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1024800#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1024565#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1024566#L87 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1026332#L149 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1026333#L1633-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1023913#L1654-5 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1023914#L153 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1029391#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1029392#L445 assume !(0 == isFloorCalling_~floorID); 1029873#L449 assume !(1 == isFloorCalling_~floorID); 1029874#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1028557#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1028558#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1025337#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1025338#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1023873#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1023874#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1029923#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1029924#L2378 assume !(0 != timeShift_~tmp___9~3); 1028997#L2469 assume !(1 == ~doorState~0); 1028998#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1026310#L1820 assume !(1 == stopRequestedInDirection_~dir); 1026311#L1989 assume !(0 == ~currentFloorID~0); 1026544#L1995 assume ~currentFloorID~0 > 0; 1026545#L1996 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1028885#L445-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1028886#L472-6 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1024253#L2000 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1024254#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1034441#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1034436#L2196 assume !(1 == ~currentHeading~0); 1034429#L2206 assume !(0 == ~currentFloorID~0); 1034423#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1034415#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1034409#L218 assume !(-1 == ~expectedDirection~0); 1034402#L230 assume !(1 == ~expectedDirection~0); 1034283#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1034282#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1034281#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1034278#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1034279#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1034389#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1034387#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1034372#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1034330#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1032010#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1032008#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1032007#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1032006#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1032001#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1032000#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1031998#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1031997#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1031990#L2378-1 assume !(0 != timeShift_~tmp___9~3); 1031991#L2469-3 assume !(1 == ~doorState~0); 1033326#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1033322#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 1033323#L1989-2 assume !(0 == ~currentFloorID~0); 1033794#L1995-2 assume ~currentFloorID~0 > 0; 1033495#L1996-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1033491#L445-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1033478#L472-27 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1033457#L2000-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1033448#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1033349#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1030132#L2196-3 assume !(1 == ~currentHeading~0); 1030082#L2206-9 assume !(0 == ~currentFloorID~0); 1030069#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1030062#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1030059#L218-1 assume !(-1 == ~expectedDirection~0); 1030056#L230-1 assume !(1 == ~expectedDirection~0); 1030055#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1030054#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1030053#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1030048#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1030049#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1030037#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1030021#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1030012#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1030004#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1030001#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1029999#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1029998#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1029996#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1029992#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1029993#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1040031#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1040032#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1040023#L2378-2 assume !(0 != timeShift_~tmp___9~3); 1040024#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1040946#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1040944#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 1040945#L1989-4 assume !(0 == ~currentFloorID~0); 1044542#L1995-4 assume !(~currentFloorID~0 > 0); 1044708#L2010-4 assume ~currentFloorID~0 > 0; 1044709#L2012-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1044713#L2013-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1044714#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1073656#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1073653#L2196-6 assume !(1 == ~currentHeading~0); 1073647#L2206-18 assume !(0 == ~currentFloorID~0); 1073402#L2206-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1073397#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1088193#L218-2 assume !(-1 == ~expectedDirection~0); 1088190#L230-2 assume !(1 == ~expectedDirection~0); 1088188#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1088184#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1088181#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1087439#L716-1 assume 0 == initPersonOnFloor_~floor; 1087379#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1087335#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1087330#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1087326#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1087324#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1087323#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1087317#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1087318#L149-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1088334#L1633-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1088331#L1654-38 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1087089#L153-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1085663#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1085662#L445-63 assume !(0 == isFloorCalling_~floorID); 1085661#L449-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1085657#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1085655#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1085656#L1633-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1086781#L1637-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1086732#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1085641#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1085635#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1085633#L2378-3 assume !(0 != timeShift_~tmp___9~3); 1075104#L2469-9 assume !(1 == ~doorState~0); 1075103#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1075101#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 1075102#L1989-6 assume !(0 == ~currentFloorID~0); 1075192#L1995-6 assume ~currentFloorID~0 > 0; 1075131#L1996-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1075182#L445-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1075175#L472-69 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1075169#L2000-6 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1074985#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1074983#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1074729#L2196-9 assume !(1 == ~currentHeading~0); 1074717#L2206-27 assume !(0 == ~currentFloorID~0); 1074716#L2206-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1074707#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1088316#L218-3 assume !(-1 == ~expectedDirection~0); 1088310#L230-3 assume !(1 == ~expectedDirection~0); 1088308#L231-3 cleanup_~i~3 := 0; 1088306#L2978-2 [2018-11-28 11:42:46,182 INFO L796 eck$LassoCheckResult]: Loop: 1088306#L2978-2 assume !false; 1088305#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1088304#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1088303#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1084638#L2986 assume 1 != cleanup_~tmp___0~10; 1081773#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1081772#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1081771#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 1081728#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1081727#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1081726#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1081724#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1081722#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1081719#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1081716#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1081717#L149-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1081786#L1633-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1081782#L1654-49 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1081692#L153-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1081691#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1081690#L445-89 assume !(0 == isFloorCalling_~floorID); 1081687#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1081681#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1081677#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1081678#L1633-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1081683#L1637-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1081680#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1081679#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1081676#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1081673#L2378-4 assume !(0 != timeShift_~tmp___9~3); 1075090#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1075070#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1075067#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 1075066#L1989-8 assume !(0 == ~currentFloorID~0); 1075064#L1995-8 assume ~currentFloorID~0 > 0; 1074700#L1996-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1075045#L445-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1075036#L472-95 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1075012#L2000-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1075005#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1075001#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1074999#L2196-12 assume !(1 == ~currentHeading~0); 1074995#L2206-36 assume !(0 == ~currentFloorID~0); 1074387#L2206-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1074388#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1088319#L218-4 assume !(-1 == ~expectedDirection~0); 1088313#L230-4 assume !(1 == ~expectedDirection~0); 1088307#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1088306#L2978-2 [2018-11-28 11:42:46,187 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:46,187 INFO L82 PathProgramCache]: Analyzing trace with hash -1576404758, now seen corresponding path program 1 times [2018-11-28 11:42:46,188 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:46,188 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:46,188 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:46,188 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:46,188 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:46,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:46,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:46,243 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:46,243 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:46,243 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:46,243 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:46,243 INFO L82 PathProgramCache]: Analyzing trace with hash -264101576, now seen corresponding path program 1 times [2018-11-28 11:42:46,243 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:46,243 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:46,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:46,244 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:46,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:46,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:46,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:46,273 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:46,273 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:42:46,273 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:46,274 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:42:46,274 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:42:46,274 INFO L87 Difference]: Start difference. First operand 68481 states and 126739 transitions. cyclomatic complexity: 58259 Second operand 5 states. [2018-11-28 11:42:46,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:46,842 INFO L93 Difference]: Finished difference Result 124203 states and 229541 transitions. [2018-11-28 11:42:46,843 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-28 11:42:46,843 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 124203 states and 229541 transitions. [2018-11-28 11:42:47,146 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32312 [2018-11-28 11:42:47,380 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 124203 states to 124203 states and 229541 transitions. [2018-11-28 11:42:47,380 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 124203 [2018-11-28 11:42:47,446 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 124203 [2018-11-28 11:42:47,446 INFO L73 IsDeterministic]: Start isDeterministic. Operand 124203 states and 229541 transitions. [2018-11-28 11:42:47,499 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:47,499 INFO L705 BuchiCegarLoop]: Abstraction has 124203 states and 229541 transitions. [2018-11-28 11:42:47,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124203 states and 229541 transitions. [2018-11-28 11:42:48,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124203 to 121731. [2018-11-28 11:42:48,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 121731 states. [2018-11-28 11:42:48,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121731 states to 121731 states and 225623 transitions. [2018-11-28 11:42:48,283 INFO L728 BuchiCegarLoop]: Abstraction has 121731 states and 225623 transitions. [2018-11-28 11:42:48,283 INFO L608 BuchiCegarLoop]: Abstraction has 121731 states and 225623 transitions. [2018-11-28 11:42:48,283 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-11-28 11:42:48,283 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 121731 states and 225623 transitions. [2018-11-28 11:42:48,500 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31616 [2018-11-28 11:42:48,500 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:48,500 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:48,502 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:48,502 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:48,502 INFO L794 eck$LassoCheckResult]: Stem: 1220709#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 1220710#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 1216464#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 1216465#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 1217718#L3172 assume 0 != main_~tmp~25; 1217089#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1217090#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1219173#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1216011#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1217228#L716 assume 0 == initPersonOnFloor_~floor; 1222249#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1216146#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1216420#L508 assume !(0 == callOnFloor_~floorID); 1215992#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1215993#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1217485#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1217257#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1217258#L87 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1219040#L149 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1218070#L1633-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1216606#L1654-5 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1216607#L153 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1216743#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1221650#L445 assume !(0 == isFloorCalling_~floorID); 1221651#L449 assume !(1 == isFloorCalling_~floorID); 1222247#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1220541#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1220012#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1218048#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1218049#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1216576#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1216577#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1221167#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1222683#L2378 assume !(0 != timeShift_~tmp___9~3); 1221753#L2469 assume !(1 == ~doorState~0); 1221723#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1219018#L1820 assume !(1 == stopRequestedInDirection_~dir); 1219019#L1989 assume !(0 == ~currentFloorID~0); 1219245#L1995 assume ~currentFloorID~0 > 0; 1219166#L1996 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1219167#L445-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1221290#L472-6 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1221291#L2000 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1222710#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1222711#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1223582#L2196 assume !(1 == ~currentHeading~0); 1223580#L2206 assume !(0 == ~currentFloorID~0); 1223578#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1223575#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1223573#L218 assume !(-1 == ~expectedDirection~0); 1223565#L230 assume !(1 == ~expectedDirection~0); 1223536#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1223535#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1223534#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1223533#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1223531#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1223529#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1223527#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1223525#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1223523#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1223522#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1223520#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1223519#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1223517#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1223510#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1223511#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1223919#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1223918#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1223916#L2378-1 assume !(0 != timeShift_~tmp___9~3); 1223915#L2469-3 assume !(1 == ~doorState~0); 1223914#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1223912#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 1223909#L1989-2 assume !(0 == ~currentFloorID~0); 1223910#L1995-2 assume ~currentFloorID~0 > 0; 1219214#L1996-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1224550#L445-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1224551#L472-27 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1216889#L2000-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1216890#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1266551#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1270491#L2196-3 assume !(1 == ~currentHeading~0); 1270489#L2206-9 assume !(0 == ~currentFloorID~0); 1254403#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1224115#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1268729#L218-1 assume !(-1 == ~expectedDirection~0); 1268717#L230-1 assume !(1 == ~expectedDirection~0); 1255042#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1255039#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1255040#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1254926#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1254345#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1254801#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1254803#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1254793#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1254795#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1254788#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1254789#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1263058#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1263054#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1263056#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1263059#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1263057#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1263050#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1263051#L2378-2 assume !(0 != timeShift_~tmp___9~3); 1272800#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1273315#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1273314#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 1273221#L1989-4 assume !(0 == ~currentFloorID~0); 1273222#L1995-4 assume !(~currentFloorID~0 > 0); 1273716#L2010-4 assume ~currentFloorID~0 > 0; 1273717#L2012-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1273797#L2013-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1272928#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1272929#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1289030#L2196-6 assume !(1 == ~currentHeading~0); 1225308#L2206-18 assume !(0 == ~currentFloorID~0); 1258273#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1258265#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1258263#L218-2 assume !(-1 == ~expectedDirection~0); 1258259#L230-2 assume !(1 == ~expectedDirection~0); 1258257#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1258253#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1258250#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1258249#L716-1 assume 0 == initPersonOnFloor_~floor; 1258228#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1258215#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1258214#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1243345#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1243346#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1319137#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1319135#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1319128#L149-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1319125#L1633-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1319118#L1654-38 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1319083#L153-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1319081#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1319079#L445-63 assume !(0 == isFloorCalling_~floorID); 1290492#L449-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1290484#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1290480#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1290481#L1633-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1290488#L1637-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1290483#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1290482#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1290479#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1290475#L2378-3 assume !(0 != timeShift_~tmp___9~3); 1290476#L2469-9 assume !(1 == ~doorState~0); 1330101#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1330099#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 1330098#L1989-6 assume !(0 == ~currentFloorID~0); 1330097#L1995-6 assume ~currentFloorID~0 > 0; 1289216#L1996-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1330096#L445-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1330095#L472-69 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1330094#L2000-6 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1217607#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1336642#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1217326#L2196-9 assume !(1 == ~currentHeading~0); 1217327#L2206-27 assume !(0 == ~currentFloorID~0); 1221632#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1221619#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1337709#L218-3 assume !(-1 == ~expectedDirection~0); 1337695#L230-3 assume !(1 == ~expectedDirection~0); 1337690#L231-3 cleanup_~i~3 := 0; 1337686#L2978-2 [2018-11-28 11:42:48,503 INFO L796 eck$LassoCheckResult]: Loop: 1337686#L2978-2 assume !false; 1337684#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1337682#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1337680#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1337678#L2986 assume 1 != cleanup_~tmp___0~10; 1337676#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1337674#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1221128#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 1221129#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1288561#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1288559#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1288560#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1296263#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1296261#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1296256#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1242944#L149-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1242945#L1633-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1296300#L1654-49 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1296298#L153-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1296299#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1297365#L445-89 assume !(0 == isFloorCalling_~floorID); 1297362#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1297356#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1297353#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1297354#L1633-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1297358#L1637-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1297355#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1297352#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1297350#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1297349#L2378-4 assume !(0 != timeShift_~tmp___9~3); 1225789#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1225346#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1225342#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 1225343#L1989-8 assume !(0 == ~currentFloorID~0); 1219202#L1995-8 assume ~currentFloorID~0 > 0; 1218982#L1996-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1218983#L445-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1225380#L472-95 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1217132#L2000-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1217133#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1337161#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1337716#L2196-12 assume !(1 == ~currentHeading~0); 1288365#L2206-36 assume !(0 == ~currentFloorID~0); 1221605#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1221590#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1337711#L218-4 assume !(-1 == ~expectedDirection~0); 1337704#L230-4 assume !(1 == ~expectedDirection~0); 1337689#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1337686#L2978-2 [2018-11-28 11:42:48,509 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:48,509 INFO L82 PathProgramCache]: Analyzing trace with hash 364604330, now seen corresponding path program 1 times [2018-11-28 11:42:48,509 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:48,509 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:48,509 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:48,510 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:48,510 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:48,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:48,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:48,576 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:48,576 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:48,576 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:48,576 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:48,577 INFO L82 PathProgramCache]: Analyzing trace with hash -262254534, now seen corresponding path program 1 times [2018-11-28 11:42:48,577 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:48,577 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:48,577 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:48,577 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:48,577 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:48,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:48,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:48,594 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:48,594 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-28 11:42:48,594 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:48,594 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-28 11:42:48,594 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-28 11:42:48,595 INFO L87 Difference]: Start difference. First operand 121731 states and 225623 transitions. cyclomatic complexity: 103893 Second operand 3 states. [2018-11-28 11:42:49,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:49,317 INFO L93 Difference]: Finished difference Result 158175 states and 292649 transitions. [2018-11-28 11:42:49,317 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-28 11:42:49,318 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 158175 states and 292649 transitions. [2018-11-28 11:42:49,687 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 39980 [2018-11-28 11:42:49,969 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 158175 states to 158175 states and 292649 transitions. [2018-11-28 11:42:49,969 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 158175 [2018-11-28 11:42:50,049 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 158175 [2018-11-28 11:42:50,049 INFO L73 IsDeterministic]: Start isDeterministic. Operand 158175 states and 292649 transitions. [2018-11-28 11:42:50,112 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:50,112 INFO L705 BuchiCegarLoop]: Abstraction has 158175 states and 292649 transitions. [2018-11-28 11:42:50,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158175 states and 292649 transitions. [2018-11-28 11:42:50,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158175 to 155231. [2018-11-28 11:42:50,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 155231 states. [2018-11-28 11:42:51,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155231 states to 155231 states and 287625 transitions. [2018-11-28 11:42:51,039 INFO L728 BuchiCegarLoop]: Abstraction has 155231 states and 287625 transitions. [2018-11-28 11:42:51,039 INFO L608 BuchiCegarLoop]: Abstraction has 155231 states and 287625 transitions. [2018-11-28 11:42:51,039 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-11-28 11:42:51,039 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 155231 states and 287625 transitions. [2018-11-28 11:42:51,310 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 39120 [2018-11-28 11:42:51,310 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:51,311 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:51,313 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:51,314 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:51,314 INFO L794 eck$LassoCheckResult]: Stem: 1500639#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 1500640#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 1496378#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 1496379#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 1497654#L3172 assume 0 != main_~tmp~25; 1497019#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1497020#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1499099#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1495925#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1497159#L716 assume 0 == initPersonOnFloor_~floor; 1502131#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1496060#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1496334#L508 assume !(0 == callOnFloor_~floorID); 1495906#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1495907#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1503936#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1503935#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1503934#L87 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1503933#L149 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1503930#L1633-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1503927#L1654-5 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1503900#L153 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1503899#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1503897#L445 assume !(0 == isFloorCalling_~floorID); 1503895#L449 assume !(1 == isFloorCalling_~floorID); 1503892#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1503891#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1503890#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1503889#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1503332#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1503328#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1503326#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1503325#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1503323#L2378 assume !(0 != timeShift_~tmp___9~3); 1503322#L2469 assume !(1 == ~doorState~0); 1503321#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1503319#L1820 assume !(1 == stopRequestedInDirection_~dir); 1503318#L1989 assume !(0 == ~currentFloorID~0); 1503317#L1995 assume ~currentFloorID~0 > 0; 1503316#L1996 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1503315#L445-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1503314#L472-6 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1496864#L2000 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1496865#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1503975#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1504208#L2196 assume !(1 == ~currentHeading~0); 1504204#L2206 assume !(0 == ~currentFloorID~0); 1504200#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1504195#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1504191#L218 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1504189#L1668-1 __utac_acc__Specification3_spec__2_#t~ret12 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~1 := __utac_acc__Specification3_spec__2_#t~ret12;havoc __utac_acc__Specification3_spec__2_#t~ret12; 1504187#L222 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~1); 1504181#L230 assume !(1 == ~expectedDirection~0); 1504176#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1504175#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1504174#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1504173#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1504171#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1504169#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1504167#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1504165#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1504163#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1504162#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1504160#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1504159#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1504158#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1504153#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1504152#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1504150#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1504149#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1504147#L2378-1 assume !(0 != timeShift_~tmp___9~3); 1504146#L2469-3 assume !(1 == ~doorState~0); 1504145#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1504143#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 1504140#L1989-2 assume !(0 == ~currentFloorID~0); 1504141#L1995-2 assume ~currentFloorID~0 > 0; 1537334#L1996-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1566196#L445-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1566048#L472-27 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1565901#L2000-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1565897#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1566710#L2477-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1566709#L2196-3 assume !(1 == ~currentHeading~0); 1566377#L2206-9 assume !(0 == ~currentFloorID~0); 1537094#L2206-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1505669#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1565962#L218-1 assume !(-1 == ~expectedDirection~0); 1565857#L230-1 assume !(1 == ~expectedDirection~0); 1565851#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1538311#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1538312#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1538195#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1502556#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1537573#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1537567#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1537431#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1537368#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1537235#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1537236#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1544399#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1544321#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1544323#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1544327#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1544324#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1544317#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1544318#L2378-2 assume !(0 != timeShift_~tmp___9~3); 1565762#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1565699#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1565688#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 1565689#L1989-4 assume !(0 == ~currentFloorID~0); 1565651#L1995-4 assume !(~currentFloorID~0 > 0); 1565652#L2010-4 assume ~currentFloorID~0 > 0; 1565636#L2012-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1565638#L2013-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1565396#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1565397#L2477-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1573651#L2196-6 assume !(1 == ~currentHeading~0); 1573649#L2206-18 assume !(0 == ~currentFloorID~0); 1539360#L2206-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1539124#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1539121#L218-2 assume !(-1 == ~expectedDirection~0); 1539122#L230-2 assume !(1 == ~expectedDirection~0); 1539098#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1539099#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1539083#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1539084#L716-1 assume 0 == initPersonOnFloor_~floor; 1538452#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1538439#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1538416#L508-2 assume !(0 == callOnFloor_~floorID); 1538410#L511-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1533663#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1533658#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1533656#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1533654#L87-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1533561#L149-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1533556#L159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1533551#L170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1533546#L181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1533541#L192-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1533525#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1533512#L445-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1533504#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1533495#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1533493#L1633-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1533485#L1637-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1533477#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1533371#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1533321#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1533182#L2378-3 assume !(0 != timeShift_~tmp___9~3); 1533181#L2469-9 assume !(1 == ~doorState~0); 1533180#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1533179#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 1533172#L1989-6 assume !(0 == ~currentFloorID~0); 1533173#L1995-6 assume !(~currentFloorID~0 > 0); 1533480#L2010-6 assume ~currentFloorID~0 > 0; 1497815#L2012-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1497540#L2013-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1497541#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1612971#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1497256#L2196-9 assume !(1 == ~currentHeading~0); 1497257#L2206-27 assume !(0 == ~currentFloorID~0); 1501515#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1532906#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1612931#L218-3 assume !(-1 == ~expectedDirection~0); 1612932#L230-3 assume !(1 == ~expectedDirection~0); 1612923#L231-3 cleanup_~i~3 := 0; 1612920#L2978-2 [2018-11-28 11:42:51,314 INFO L796 eck$LassoCheckResult]: Loop: 1612920#L2978-2 assume !false; 1612918#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1612916#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 1612914#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 1612912#L2986 assume 1 != cleanup_~tmp___0~10; 1612910#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1612908#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1612906#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 1612902#L1724 assume !(0 != anyStopRequested_~tmp___3~1); 1605720#L1728 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 1605719#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 1605718#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 1605717#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1605716#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1605715#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1605714#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1574835#L149-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1516086#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1516083#L170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1516080#L181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1516078#L192-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1516074#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1516071#L445-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1516070#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1516069#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1516066#L1633-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1516056#L1637-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1516054#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1516052#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1516051#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1516048#L2378-4 assume !(0 != timeShift_~tmp___9~3); 1516046#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1516044#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1516041#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 1516042#L1989-8 assume !(0 == ~currentFloorID~0); 1516411#L1995-8 assume !(~currentFloorID~0 > 0); 1523688#L2010-8 assume ~currentFloorID~0 > 0; 1523689#L2012-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1605615#L2013-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1605596#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1605597#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1612970#L2196-12 assume !(1 == ~currentHeading~0); 1515907#L2206-36 assume !(0 == ~currentFloorID~0); 1515889#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1515878#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1612958#L218-4 assume !(-1 == ~expectedDirection~0); 1612959#L230-4 assume !(1 == ~expectedDirection~0); 1612922#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 1612920#L2978-2 [2018-11-28 11:42:51,318 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:51,320 INFO L82 PathProgramCache]: Analyzing trace with hash -506338201, now seen corresponding path program 1 times [2018-11-28 11:42:51,320 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:51,320 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:51,320 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:51,320 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:51,320 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:51,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:51,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:51,380 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:51,380 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:51,380 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:51,381 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:51,381 INFO L82 PathProgramCache]: Analyzing trace with hash 744683507, now seen corresponding path program 1 times [2018-11-28 11:42:51,381 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:51,381 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:51,381 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:51,382 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:51,382 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:51,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:51,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:51,404 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:51,404 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-28 11:42:51,404 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:51,405 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-28 11:42:51,405 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-28 11:42:51,405 INFO L87 Difference]: Start difference. First operand 155231 states and 287625 transitions. cyclomatic complexity: 132395 Second operand 5 states. [2018-11-28 11:42:54,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:42:54,334 INFO L93 Difference]: Finished difference Result 264572 states and 492041 transitions. [2018-11-28 11:42:54,335 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-11-28 11:42:54,335 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 264572 states and 492041 transitions. [2018-11-28 11:42:54,967 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 68987 [2018-11-28 11:42:55,489 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 264572 states to 263460 states and 490139 transitions. [2018-11-28 11:42:55,489 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 263460 [2018-11-28 11:42:55,616 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 263460 [2018-11-28 11:42:55,617 INFO L73 IsDeterministic]: Start isDeterministic. Operand 263460 states and 490139 transitions. [2018-11-28 11:42:55,717 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:42:55,717 INFO L705 BuchiCegarLoop]: Abstraction has 263460 states and 490139 transitions. [2018-11-28 11:42:55,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263460 states and 490139 transitions. [2018-11-28 11:42:56,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263460 to 154433. [2018-11-28 11:42:56,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154433 states. [2018-11-28 11:42:57,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154433 states to 154433 states and 285891 transitions. [2018-11-28 11:42:57,008 INFO L728 BuchiCegarLoop]: Abstraction has 154433 states and 285891 transitions. [2018-11-28 11:42:57,008 INFO L608 BuchiCegarLoop]: Abstraction has 154433 states and 285891 transitions. [2018-11-28 11:42:57,008 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-11-28 11:42:57,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 154433 states and 285891 transitions. [2018-11-28 11:42:57,283 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 38958 [2018-11-28 11:42:57,283 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:42:57,283 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:42:57,285 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:57,286 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:42:57,286 INFO L794 eck$LassoCheckResult]: Stem: 1920462#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 1920463#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 1916200#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 1916201#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 1917471#L3172 assume 0 != main_~tmp~25; 1916842#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1916843#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1918905#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1915750#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1916982#L716 assume 0 == initPersonOnFloor_~floor; 1922062#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1915885#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1916156#L508 assume !(0 == callOnFloor_~floorID); 1915731#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1915732#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1921255#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1921256#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1921608#L87 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1921609#L149 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1917817#L1633-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1917818#L1654-5 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 1916481#L153 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1916482#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1923150#L445 assume !(0 == isFloorCalling_~floorID); 1923013#L449 assume !(1 == isFloorCalling_~floorID); 1923006#L453 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1923004#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1922999#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1922997#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1922995#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1922990#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1922987#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1922979#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1922969#L2378 assume !(0 != timeShift_~tmp___9~3); 1922967#L2469 assume !(1 == ~doorState~0); 1922966#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1922964#L1820 assume !(1 == stopRequestedInDirection_~dir); 1922963#L1989 assume !(0 == ~currentFloorID~0); 1922961#L1995 assume ~currentFloorID~0 > 0; 1922959#L1996 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1922941#L445-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1922923#L472-6 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 1922902#L2000 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1922839#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1922833#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1922823#L2196 assume !(1 == ~currentHeading~0); 1922816#L2206 assume !(0 == ~currentFloorID~0); 1922809#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1922806#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1922800#L218 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1922798#L1668-1 __utac_acc__Specification3_spec__2_#t~ret12 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~1 := __utac_acc__Specification3_spec__2_#t~ret12;havoc __utac_acc__Specification3_spec__2_#t~ret12; 1922796#L222 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~1); 1922793#L230 assume !(1 == ~expectedDirection~0); 1922791#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1922790#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1922789#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1922788#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1922786#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1922784#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1922782#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1922780#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1922778#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1922777#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1922775#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1922774#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1922773#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1922772#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1922771#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1922769#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1922768#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1922766#L2378-1 assume !(0 != timeShift_~tmp___9~3); 1922765#L2469-3 assume !(1 == ~doorState~0); 1922764#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1922762#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 1922763#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1922716#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1923012#L2477-1 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 1922707#L2251-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 1923009#L2256-2 timeShift_#t~ret97 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret97;havoc timeShift_#t~ret97;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1923005#L1820-3 assume !(1 == stopRequestedInDirection_~dir); 1922844#L1989-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1922835#L2142-3 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1922824#L2486-1 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1922817#L2196-5 assume !(1 == ~currentHeading~0); 1922810#L2206-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1922702#L2206-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1922699#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1922697#L218-1 assume !(-1 == ~expectedDirection~0); 1922696#L230-1 assume !(1 == ~expectedDirection~0); 1922692#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1922691#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1922689#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1922690#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1927085#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1927082#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1927079#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1927076#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1927073#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1927071#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1927069#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1927068#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1927067#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1927066#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1927065#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1927063#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1927062#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1927060#L2378-2 assume !(0 != timeShift_~tmp___9~3); 1927059#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1927058#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1927057#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 1919183#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1919184#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1941270#L2477-2 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 1941044#L2251-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 1941264#L2256-4 timeShift_#t~ret97 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret97;havoc timeShift_#t~ret97;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1941265#L1820-5 assume !(1 == stopRequestedInDirection_~dir); 1942138#L1989-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1941192#L2142-5 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1941193#L2486-2 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1941561#L2196-8 assume !(1 == ~currentHeading~0); 1941559#L2206-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1941560#L2206-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1943352#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 1943350#L218-2 assume !(-1 == ~expectedDirection~0); 1943347#L230-2 assume !(1 == ~expectedDirection~0); 1943344#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 1943340#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 1943337#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1943336#L716-1 assume 0 == initPersonOnFloor_~floor; 1943283#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1943269#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1943266#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1926684#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 1926673#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 1926674#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 1926668#L87-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1926669#L88-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1972345#L1633-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2011572#L1654-33 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2011570#L92-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1972118#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1972100#L445-63 assume !(0 == isFloorCalling_~floorID); 1972098#L449-63 assume !(1 == isFloorCalling_~floorID); 1972099#L453-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1972093#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 1942739#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 1942740#L1633-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1942736#L1637-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 1926461#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 1926462#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 1926452#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 1926453#L2378-3 assume !(0 != timeShift_~tmp___9~3); 1926444#L2469-9 assume !(1 == ~doorState~0); 1926445#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1926431#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 1926432#L1989-6 assume !(0 == ~currentFloorID~0); 1972269#L1995-6 assume !(~currentFloorID~0 > 0); 1972270#L2010-6 assume ~currentFloorID~0 > 0; 1972264#L2012-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1972262#L2013-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1926696#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 1926692#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 1926689#L2196-9 assume !(1 == ~currentHeading~0); 1917080#L2206-27 assume !(0 == ~currentFloorID~0); 1921416#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2000186#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 2002332#L218-3 assume !(-1 == ~expectedDirection~0); 2002325#L230-3 assume !(1 == ~expectedDirection~0); 2002319#L231-3 cleanup_~i~3 := 0; 2002309#L2978-2 [2018-11-28 11:42:57,286 INFO L796 eck$LassoCheckResult]: Loop: 2002309#L2978-2 assume !false; 2002310#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2002305#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 2002306#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 2002301#L2986 assume 1 != cleanup_~tmp___0~10; 2002302#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2002297#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2002298#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 2002294#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 2002293#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 2002292#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 2002291#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2002290#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2002289#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 2002288#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1991827#L149-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2002286#L159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2002285#L170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2002284#L181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2002283#L192-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2002282#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2002280#L445-89 assume !(0 == isFloorCalling_~floorID); 2002277#L449-89 assume !(1 == isFloorCalling_~floorID); 2002266#L453-89 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2002262#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2002226#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2002224#L1633-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2002219#L1637-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2002213#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 2002207#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2002203#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 2002198#L2378-4 assume !(0 != timeShift_~tmp___9~3); 2002194#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2002188#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2002183#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 2002184#L1989-8 assume !(0 == ~currentFloorID~0); 2002214#L1995-8 assume !(~currentFloorID~0 > 0); 2002209#L2010-8 assume ~currentFloorID~0 > 0; 2002210#L2012-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2028502#L2013-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2028487#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 2028485#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 2002090#L2196-12 assume !(1 == ~currentHeading~0); 2001534#L2206-36 assume !(0 == ~currentFloorID~0); 2001500#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2000182#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 2003289#L218-4 assume !(-1 == ~expectedDirection~0); 2003173#L230-4 assume !(1 == ~expectedDirection~0); 2002352#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 2002309#L2978-2 [2018-11-28 11:42:57,294 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:57,294 INFO L82 PathProgramCache]: Analyzing trace with hash -1101424304, now seen corresponding path program 1 times [2018-11-28 11:42:57,295 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:57,295 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:57,295 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:57,295 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:57,295 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:57,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:57,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:57,347 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:57,347 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:42:57,347 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:42:57,347 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:42:57,348 INFO L82 PathProgramCache]: Analyzing trace with hash -1196229385, now seen corresponding path program 1 times [2018-11-28 11:42:57,348 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:42:57,348 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:42:57,348 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:57,348 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:42:57,348 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:42:57,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:42:57,395 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:42:57,395 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:42:57,395 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-11-28 11:42:57,395 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-28 11:42:57,396 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-11-28 11:42:57,396 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2018-11-28 11:42:57,396 INFO L87 Difference]: Start difference. First operand 154433 states and 285891 transitions. cyclomatic complexity: 131459 Second operand 7 states. [2018-11-28 11:43:01,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:43:01,014 INFO L93 Difference]: Finished difference Result 292274 states and 534965 transitions. [2018-11-28 11:43:01,014 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-11-28 11:43:01,014 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 292274 states and 534965 transitions. [2018-11-28 11:43:01,753 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 73769 [2018-11-28 11:43:02,332 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 292274 states to 292274 states and 534965 transitions. [2018-11-28 11:43:02,332 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 292274 [2018-11-28 11:43:02,489 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 292274 [2018-11-28 11:43:02,489 INFO L73 IsDeterministic]: Start isDeterministic. Operand 292274 states and 534965 transitions. [2018-11-28 11:43:02,607 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:43:02,607 INFO L705 BuchiCegarLoop]: Abstraction has 292274 states and 534965 transitions. [2018-11-28 11:43:02,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292274 states and 534965 transitions. [2018-11-28 11:43:08,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292274 to 205837. [2018-11-28 11:43:08,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 205837 states. [2018-11-28 11:43:08,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 205837 states to 205837 states and 381751 transitions. [2018-11-28 11:43:08,674 INFO L728 BuchiCegarLoop]: Abstraction has 205837 states and 381751 transitions. [2018-11-28 11:43:08,674 INFO L608 BuchiCegarLoop]: Abstraction has 205837 states and 381751 transitions. [2018-11-28 11:43:08,674 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-11-28 11:43:08,674 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 205837 states and 381751 transitions. [2018-11-28 11:43:09,055 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 52714 [2018-11-28 11:43:09,055 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-28 11:43:09,056 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-28 11:43:09,058 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:43:09,058 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-28 11:43:09,059 INFO L794 eck$LassoCheckResult]: Stem: 2367173#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~weight~0 := 0;~maximumWeight~0 := 100;~expectedDirection~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string38.base, #t~string38.offset := #Ultimate.alloc(30);call #t~string39.base, #t~string39.offset := #Ultimate.alloc(9);call #t~string40.base, #t~string40.offset := #Ultimate.alloc(21);call #t~string41.base, #t~string41.offset := #Ultimate.alloc(30);call #t~string42.base, #t~string42.offset := #Ultimate.alloc(9);call #t~string43.base, #t~string43.offset := #Ultimate.alloc(21);call #t~string47.base, #t~string47.offset := #Ultimate.alloc(30);call #t~string48.base, #t~string48.offset := #Ultimate.alloc(9);call #t~string49.base, #t~string49.offset := #Ultimate.alloc(25);call #t~string50.base, #t~string50.offset := #Ultimate.alloc(30);call #t~string51.base, #t~string51.offset := #Ultimate.alloc(9);call #t~string52.base, #t~string52.offset := #Ultimate.alloc(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string100.base, #t~string100.offset := #Ultimate.alloc(10);call #t~string102.base, #t~string102.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string102.base, #t~string102.offset, 1);call write~init~int(95, #t~string102.base, 1 + #t~string102.offset, 1);call write~init~int(93, #t~string102.base, 2 + #t~string102.offset, 1);call write~init~int(0, #t~string102.base, 3 + #t~string102.offset, 1);call #t~string104.base, #t~string104.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(32, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(97, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(116, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 3 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 4 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string108.base, #t~string108.offset, 1);call write~init~int(105, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 2 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.alloc(10);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string112.base, #t~string112.offset, 1);call write~init~int(112, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 2 + #t~string112.offset, 1);call #t~string114.base, #t~string114.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string114.base, #t~string114.offset, 1);call write~init~int(111, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(119, #t~string114.base, 2 + #t~string114.offset, 1);call write~init~int(110, #t~string114.base, 3 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 4 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string116.base, #t~string116.offset, 1);call write~init~int(73, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(76, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(95, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(112, #t~string116.base, 4 + #t~string116.offset, 1);call write~init~int(58, #t~string116.base, 5 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 6 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(37, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(105, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 3 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(70, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(95, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(112, #t~string128.base, 3 + #t~string128.offset, 1);call write~init~int(58, #t~string128.base, 4 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 5 + #t~string128.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string134.base, #t~string134.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string134.base, #t~string134.offset, 1);call write~init~int(37, #t~string134.base, 1 + #t~string134.offset, 1);call write~init~int(105, #t~string134.base, 2 + #t~string134.offset, 1);call write~init~int(0, #t~string134.base, 3 + #t~string134.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string140.base, #t~string140.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string140.base, #t~string140.offset, 1);call write~init~int(37, #t~string140.base, 1 + #t~string140.offset, 1);call write~init~int(105, #t~string140.base, 2 + #t~string140.offset, 1);call write~init~int(0, #t~string140.base, 3 + #t~string140.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string145.base, #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 1 + #t~string145.offset, 1); 2367174#L-1 havoc main_#res;havoc main_#t~ret160, main_~retValue_acc~20, main_~tmp~25;havoc main_~retValue_acc~20;havoc main_~tmp~25; 2362946#L3326 havoc valid_product_#res;havoc valid_product_~retValue_acc~25;havoc valid_product_~retValue_acc~25;valid_product_~retValue_acc~25 := 1;valid_product_#res := valid_product_~retValue_acc~25; 2362947#L3334 main_#t~ret160 := valid_product_#res;main_~tmp~25 := main_#t~ret160;havoc main_#t~ret160; 2364199#L3172 assume 0 != main_~tmp~25; 2363574#L3146 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2363575#L438 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 2365614#L3229 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 2362496#L3254 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2363708#L716 assume 0 == initPersonOnFloor_~floor; 2368778#L717 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2362628#L824-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2362901#L508 assume !(0 == callOnFloor_~floorID); 2362472#L511 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2362473#L520-2 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2363964#L1616 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2363739#L1668 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 2363740#L87 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2365494#L149 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2365495#L1633-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2363088#L1654-5 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 2363089#L153 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2369655#L193 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2369654#L445 assume !(0 == isFloorCalling_~floorID); 2369653#L449 assume !(1 == isFloorCalling_~floorID); 2369652#L453 assume !(2 == isFloorCalling_~floorID); 2369650#L457 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2369649#L472 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2369648#L2229 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2369647#L1633-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2369646#L1637-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2369642#L1654-10 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 2369640#L2236 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2369639#L2241 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 2369637#L2378 assume !(0 != timeShift_~tmp___9~3); 2369636#L2469 assume !(1 == ~doorState~0); 2369635#L2469-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2369630#L1820 assume !(1 == stopRequestedInDirection_~dir); 2369625#L1989 assume !(0 == ~currentFloorID~0); 2369618#L1995 assume ~currentFloorID~0 > 0; 2369611#L1996 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2369602#L445-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2369591#L472-6 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 2369572#L2000 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2369555#L2142 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 2369463#L2477 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 2369455#L2196 assume !(1 == ~currentHeading~0); 2369447#L2206 assume !(0 == ~currentFloorID~0); 2369441#L2206-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2369433#L2212-5 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 2369427#L218 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2369421#L1668-1 __utac_acc__Specification3_spec__2_#t~ret12 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~1 := __utac_acc__Specification3_spec__2_#t~ret12;havoc __utac_acc__Specification3_spec__2_#t~ret12; 2369419#L222 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~1); 2369409#L230 assume !(1 == ~expectedDirection~0); 2369405#L231 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2369403#L1616-1 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2369400#L1668-3 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 2369399#L87-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2369394#L149-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2369388#L159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2369382#L170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2369378#L181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2369377#L192-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2369375#L193-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2369373#L445-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2369372#L472-21 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2369371#L2229-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2369370#L1633-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2369369#L1654-21 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 2369367#L2236-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2369366#L2241-1 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 2369364#L2378-1 assume !(0 != timeShift_~tmp___9~3); 2369363#L2469-3 assume !(1 == ~doorState~0); 2369362#L2469-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2369360#L1820-2 assume !(1 == stopRequestedInDirection_~dir); 2369361#L1989-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2369358#L2142-2 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 2381351#L2477-1 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 2381251#L2251-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 2381339#L2256-2 timeShift_#t~ret97 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret97;havoc timeShift_#t~ret97;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2381335#L1820-3 assume !(1 == stopRequestedInDirection_~dir); 2381306#L1989-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2381259#L2142-3 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2381252#L2486-1 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 2381246#L2196-5 assume !(1 == ~currentHeading~0); 2381240#L2206-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2381235#L2206-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2381230#L2212-11 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 2381227#L218-1 assume !(-1 == ~expectedDirection~0); 2370645#L230-1 assume !(1 == ~expectedDirection~0); 2370635#L231-1 havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2370631#L1616-2 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2370632#L1668-6 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 2377447#L87-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2377448#L149-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2381237#L159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2381231#L170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2381228#L181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2381220#L192-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2370696#L193-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2370697#L445-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2370694#L472-42 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2370693#L2229-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2370692#L1633-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2370691#L1654-32 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 2370689#L2236-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2370688#L2241-2 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 2370685#L2378-2 assume !(0 != timeShift_~tmp___9~3); 2370687#L2469-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2370681#L2469-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2370682#L1820-4 assume !(1 == stopRequestedInDirection_~dir); 2382008#L1989-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2381982#L2142-4 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 2382378#L2477-2 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~17;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~17; 2381950#L2251-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~17 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~17; 2382370#L2256-4 timeShift_#t~ret97 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret97;havoc timeShift_#t~ret97;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2382356#L1820-5 assume !(1 == stopRequestedInDirection_~dir); 2382307#L1989-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~14 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2381962#L2142-5 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2381951#L2486-2 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 2381936#L2196-8 assume !(1 == ~currentHeading~0); 2381928#L2206-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2381922#L2206-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2381921#L2212-17 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 2381919#L218-2 assume !(-1 == ~expectedDirection~0); 2381917#L230-2 assume !(1 == ~expectedDirection~0); 2381913#L231-2 havoc bobCall_#t~ret148, bobCall_~tmp~17;havoc bobCall_~tmp~17;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~22;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~22; 2381909#L3229-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~22 := 4;getOrigin_#res := getOrigin_~retValue_acc~22; 2381906#L3254-1 bobCall_#t~ret148 := getOrigin_#res;bobCall_~tmp~17 := bobCall_#t~ret148;havoc bobCall_#t~ret148;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2381905#L716-1 assume 0 == initPersonOnFloor_~floor; 2381879#L717-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2381835#L824-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2381832#L508-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2381833#L520-5 havoc cleanup_#t~ret154, cleanup_#t~ret155, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~10, cleanup_~__cil_tmp4~2;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~10;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2430413#L1616-3 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2430411#L1668-9 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 2430408#L87-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2430405#L88-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2430406#L1633-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2431018#L1654-33 __utac_acc__Specification3_spec__1_#t~ret2 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; 2411372#L92-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 2411363#L193-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2434430#L445-63 assume !(0 == isFloorCalling_~floorID); 2430071#L449-63 assume !(1 == isFloorCalling_~floorID); 2434429#L453-63 assume !(2 == isFloorCalling_~floorID); 2434427#L457-63 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2434424#L472-63 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2434423#L2229-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2434422#L1633-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2434273#L1637-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2433887#L1654-43 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 2433885#L2236-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2433883#L2241-3 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 2433880#L2378-3 assume !(0 != timeShift_~tmp___9~3); 2433878#L2469-9 assume !(1 == ~doorState~0); 2433874#L2469-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2433829#L1820-6 assume !(1 == stopRequestedInDirection_~dir); 2433830#L1989-6 assume !(0 == ~currentFloorID~0); 2441532#L1995-6 assume !(~currentFloorID~0 > 0); 2441530#L2010-6 assume ~currentFloorID~0 > 0; 2441531#L2012-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 2563612#L2013-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2563369#L2142-6 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 2563365#L2477-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 2563363#L2196-9 assume !(1 == ~currentHeading~0); 2363806#L2206-27 assume !(0 == ~currentFloorID~0); 2368135#L2206-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2433068#L2212-23 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 2442460#L218-3 assume !(-1 == ~expectedDirection~0); 2442376#L230-3 assume !(1 == ~expectedDirection~0); 2442328#L231-3 cleanup_~i~3 := 0; 2442326#L2978-2 [2018-11-28 11:43:09,059 INFO L796 eck$LassoCheckResult]: Loop: 2442326#L2978-2 assume !false; 2442277#L2979 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2442269#L2982 assume cleanup_~i~3 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~6;havoc isBlocked_~retValue_acc~6;isBlocked_~retValue_acc~6 := 0;isBlocked_#res := isBlocked_~retValue_acc~6; 2442135#L1463 cleanup_#t~ret154 := isBlocked_#res;cleanup_~tmp___0~10 := cleanup_#t~ret154;havoc cleanup_#t~ret154; 2442134#L2986 assume 1 != cleanup_~tmp___0~10; 2442133#L2986-1 havoc isIdle_#res;havoc isIdle_#t~ret62, isIdle_~retValue_acc~13, isIdle_~tmp~10;havoc isIdle_~retValue_acc~13;havoc isIdle_~tmp~10;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret57, anyStopRequested_#t~ret58, anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_~retValue_acc~12, anyStopRequested_~tmp~9, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~12;havoc anyStopRequested_~tmp~9;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2441840#L445-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2441841#L472-84 anyStopRequested_#t~ret57 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret57;havoc anyStopRequested_#t~ret57; 2425419#L1724 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~12 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~12; 2425414#L1788 isIdle_#t~ret62 := anyStopRequested_#res;isIdle_~tmp~10 := isIdle_#t~ret62;havoc isIdle_#t~ret62;isIdle_~retValue_acc~13 := (if 0 == isIdle_~tmp~10 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~13; 2425411#L1801 cleanup_#t~ret155 := isIdle_#res;cleanup_~tmp~23 := cleanup_#t~ret155;havoc cleanup_#t~ret155; 2425403#L2998 assume !(0 != cleanup_~tmp~23);havoc timeShift_#t~ret89, timeShift_#t~ret90, timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_~tmp~15, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~15;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_#t~ret3, __utac_acc__Specification3_spec__1_#t~ret4, __utac_acc__Specification3_spec__1_#t~ret5, __utac_acc__Specification3_spec__1_#t~ret6, __utac_acc__Specification3_spec__1_#t~ret7, __utac_acc__Specification3_spec__1_#t~ret8, __utac_acc__Specification3_spec__1_#t~ret9, __utac_acc__Specification3_spec__1_#t~ret10, __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~7;havoc getCurrentFloorID_~retValue_acc~7;getCurrentFloorID_~retValue_acc~7 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~7; 2425400#L1616-4 __utac_acc__Specification3_spec__1_#t~ret0 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2425393#L1668-12 __utac_acc__Specification3_spec__1_#t~ret1 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; 2425391#L87-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2425381#L149-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2425382#L1633-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2512613#L1654-49 __utac_acc__Specification3_spec__1_#t~ret7 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret7;havoc __utac_acc__Specification3_spec__1_#t~ret7; 2512611#L153-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2512610#L193-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret75, stopRequestedAtCurrentFloor_#t~ret76, stopRequestedAtCurrentFloor_~retValue_acc~16, stopRequestedAtCurrentFloor_~tmp~13, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~16;havoc stopRequestedAtCurrentFloor_~tmp~13;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2512609#L445-89 assume !(0 == isFloorCalling_~floorID); 2512606#L449-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2512600#L472-89 stopRequestedAtCurrentFloor_#t~ret75 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret75;havoc stopRequestedAtCurrentFloor_#t~ret75; 2512596#L2229-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~9;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~9; 2512597#L1633-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2512602#L1637-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~9 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~9; 2512599#L1654-54 stopRequestedAtCurrentFloor_#t~ret76 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~13 := stopRequestedAtCurrentFloor_#t~ret76;havoc stopRequestedAtCurrentFloor_#t~ret76; 2512598#L2236-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13);stopRequestedAtCurrentFloor_~retValue_acc~16 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~16; 2512595#L2241-4 timeShift_#t~ret89 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret89;havoc timeShift_#t~ret89; 2512582#L2378-4 assume !(0 != timeShift_~tmp___9~3); 2452812#L2469-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2452809#L2469-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret63, stopRequestedInDirection_#t~ret64, stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~tmp~11, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~tmp~11;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2452805#L1820-8 assume !(1 == stopRequestedInDirection_~dir); 2452802#L1989-8 assume !(0 == ~currentFloorID~0); 2452797#L1995-8 assume ~currentFloorID~0 > 0; 2452783#L1996-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2452774#L445-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2452768#L472-95 stopRequestedInDirection_#t~ret69 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret69;havoc stopRequestedInDirection_#t~ret69; 2452740#L2000-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~14 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2452629#L2142-8 timeShift_#t~ret96 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret96;havoc timeShift_#t~ret96; 2452623#L2477-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret74, continueInDirection_~dir, continueInDirection_~tmp~12;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~12;~currentHeading~0 := continueInDirection_~dir; 2452515#L2196-12 assume !(1 == ~currentHeading~0); 2452360#L2206-36 assume !(0 == ~currentFloorID~0); 2442878#L2206-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2442876#L2212-29 havoc __utac_acc__Specification3_spec__2_#t~ret12, __utac_acc__Specification3_spec__2_#t~ret13, __utac_acc__Specification3_spec__2_~tmp~1, __utac_acc__Specification3_spec__2_~tmp___0~1;havoc __utac_acc__Specification3_spec__2_~tmp~1;havoc __utac_acc__Specification3_spec__2_~tmp___0~1; 2442874#L218-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~10;havoc getCurrentHeading_~retValue_acc~10;getCurrentHeading_~retValue_acc~10 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~10; 2442661#L1668-13 __utac_acc__Specification3_spec__2_#t~ret12 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~1 := __utac_acc__Specification3_spec__2_#t~ret12;havoc __utac_acc__Specification3_spec__2_#t~ret12; 2442871#L222-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~1); 2442332#L230-4 assume !(1 == ~expectedDirection~0); 2442327#L231-4 cleanup_~i~3 := 1 + cleanup_~i~3; 2442326#L2978-2 [2018-11-28 11:43:09,068 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:43:09,068 INFO L82 PathProgramCache]: Analyzing trace with hash 2098399728, now seen corresponding path program 1 times [2018-11-28 11:43:09,069 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:43:09,069 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:43:09,069 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:43:09,069 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:43:09,069 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:43:09,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:43:09,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:43:09,150 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-28 11:43:09,150 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-28 11:43:09,150 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-28 11:43:09,151 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:43:09,151 INFO L82 PathProgramCache]: Analyzing trace with hash 1364533589, now seen corresponding path program 1 times [2018-11-28 11:43:09,151 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-28 11:43:09,151 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-28 11:43:09,151 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:43:09,151 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-28 11:43:09,151 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-28 11:43:09,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 11:43:09,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-28 11:43:09,562 WARN L180 SmtUtils]: Spent 363.00 ms on a formula simplification. DAG size of input: 189 DAG size of output: 159 [2018-11-28 11:43:09,884 WARN L180 SmtUtils]: Spent 313.00 ms on a formula simplification. DAG size of input: 132 DAG size of output: 127 [2018-11-28 11:43:09,892 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 11:43:09,892 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 11:43:09,893 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 11:43:09,893 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 11:43:09,893 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-28 11:43:09,893 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:09,893 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 11:43:09,893 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 11:43:09,893 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product17_true-unreach-call_true-termination.cil.c_Iteration16_Loop [2018-11-28 11:43:09,893 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 11:43:09,893 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 11:43:09,919 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,950 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,963 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,977 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,987 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:09,998 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,026 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,064 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,068 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,081 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,081 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,128 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,145 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,147 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:10,514 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 11:43:10,514 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:10,524 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:10,524 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:10,529 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:10,530 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:10,548 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:10,548 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:10,551 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:10,551 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:10,572 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:10,572 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:10,575 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:10,575 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:10,940 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:10,940 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:10,942 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:10,943 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret10=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:10,959 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:10,959 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:10,964 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:10,964 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~8=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:10,986 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:10,987 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:10,988 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:10,989 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret60=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:11,006 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:11,007 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:11,016 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:11,016 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret99=0} Honda state: {ULTIMATE.start_timeShift_#t~ret99=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:11,031 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:11,031 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:11,033 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:11,033 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:11,051 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:11,051 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:11,054 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-28 11:43:11,054 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret91=0} Honda state: {ULTIMATE.start_timeShift_#t~ret91=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:11,076 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-28 11:43:11,076 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_e71a184a-56f8-431e-b98d-078e7c23fe95/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:11,108 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-28 11:43:11,108 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-28 11:43:11,588 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-28 11:43:11,590 INFO L216 LassoAnalysis]: Preferences: [2018-11-28 11:43:11,590 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-28 11:43:11,590 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-28 11:43:11,590 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-28 11:43:11,590 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-28 11:43:11,590 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-28 11:43:11,590 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-28 11:43:11,590 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-28 11:43:11,590 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product17_true-unreach-call_true-termination.cil.c_Iteration16_Loop [2018-11-28 11:43:11,590 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-28 11:43:11,590 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-28 11:43:11,593 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,595 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,596 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,597 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,598 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,599 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,601 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,603 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,604 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,610 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,611 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,613 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,614 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,615 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,617 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,618 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,619 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,620 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,621 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,628 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,674 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,692 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,696 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,742 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,794 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,892 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,899 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,915 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,919 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,931 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:11,998 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,004 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,024 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,050 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-28 11:43:12,550 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-28 11:43:12,554 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-28 11:43:12,555 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,556 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,556 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,557 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,557 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,557 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,559 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,559 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,561 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,561 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,561 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,561 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,561 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,561 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,562 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,562 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,562 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,562 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,563 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,563 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,563 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,563 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,563 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,563 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,564 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,564 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,564 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,565 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,565 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,565 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,565 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,565 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,565 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,565 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,566 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,566 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,566 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,566 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,567 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,567 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,567 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,567 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,567 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,567 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,568 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,568 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,568 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,568 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,568 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,568 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,568 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,569 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,569 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,569 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,569 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,570 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,570 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,570 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,570 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,570 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,571 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,571 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,571 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,571 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,572 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,572 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,572 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,572 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,572 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,572 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,572 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,573 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,573 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,573 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,573 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,573 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,574 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,574 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,574 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,574 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,574 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-28 11:43:12,575 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-28 11:43:12,575 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-28 11:43:12,575 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-28 11:43:12,575 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-28 11:43:12,575 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-28 11:43:12,575 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-28 11:43:12,576 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-28 11:43:12,576 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-28 11:43:12,578 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-28 11:43:12,581 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-28 11:43:12,581 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-28 11:43:12,583 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-28 11:43:12,583 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-28 11:43:12,583 INFO L518 LassoAnalysis]: Proved termination. [2018-11-28 11:43:12,584 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-28 11:43:12,584 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-28 11:43:12,636 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-28 11:43:12,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:43:12,785 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 11:43:12,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-28 11:43:12,850 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-28 11:43:12,899 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-28 11:43:12,902 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-28 11:43:12,903 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 205837 states and 381751 transitions. cyclomatic complexity: 175915 Second operand 5 states. [2018-11-28 11:43:14,102 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 205837 states and 381751 transitions. cyclomatic complexity: 175915. Second operand 5 states. Result 258551 states and 479047 transitions. Complement of second has 8 states. [2018-11-28 11:43:14,105 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-28 11:43:14,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-28 11:43:14,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 10649 transitions. [2018-11-28 11:43:14,115 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10649 transitions. Stem has 171 letters. Loop has 50 letters. [2018-11-28 11:43:14,117 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 11:43:14,117 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10649 transitions. Stem has 221 letters. Loop has 50 letters. [2018-11-28 11:43:14,118 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 11:43:14,118 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 10649 transitions. Stem has 171 letters. Loop has 100 letters. [2018-11-28 11:43:14,119 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-28 11:43:14,120 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 258551 states and 479047 transitions. [2018-11-28 11:43:14,816 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 11:43:14,816 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 258551 states to 0 states and 0 transitions. [2018-11-28 11:43:14,816 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 11:43:14,816 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 11:43:14,816 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 11:43:14,817 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:43:14,817 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:43:14,817 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:43:14,817 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-28 11:43:14,817 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-28 11:43:14,817 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-11-28 11:43:14,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-28 11:43:14,817 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-28 11:43:14,817 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-28 11:43:14,817 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-28 11:43:14,817 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 11:43:14,818 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-28 11:43:14,818 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-28 11:43:14,818 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-28 11:43:14,818 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-28 11:43:14,818 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-28 11:43:14,818 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:43:14,818 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:43:14,818 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-28 11:43:14,818 INFO L442 BuchiCegarLoop]: ======== Iteration 17============ [2018-11-28 11:43:14,818 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-28 11:43:14,818 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-28 11:43:14,818 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-28 11:43:14,824 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 28.11 11:43:14 BoogieIcfgContainer [2018-11-28 11:43:14,824 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-28 11:43:14,824 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-28 11:43:14,824 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-28 11:43:14,824 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-28 11:43:14,825 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 11:42:16" (3/4) ... [2018-11-28 11:43:14,828 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-28 11:43:14,828 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-28 11:43:14,828 INFO L168 Benchmark]: Toolchain (without parser) took 65213.27 ms. Allocated memory was 1.0 GB in the beginning and 6.1 GB in the end (delta: 5.1 GB). Free memory was 950.6 MB in the beginning and 2.2 GB in the end (delta: -1.3 GB). Peak memory consumption was 3.8 GB. Max. memory is 11.5 GB. [2018-11-28 11:43:14,829 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 11:43:14,829 INFO L168 Benchmark]: CACSL2BoogieTranslator took 555.74 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 144.7 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -163.0 MB). Peak memory consumption was 49.2 MB. Max. memory is 11.5 GB. [2018-11-28 11:43:14,830 INFO L168 Benchmark]: Boogie Procedure Inliner took 218.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 58.6 MB). Peak memory consumption was 58.6 MB. Max. memory is 11.5 GB. [2018-11-28 11:43:14,830 INFO L168 Benchmark]: Boogie Preprocessor took 210.76 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 53.0 MB). Peak memory consumption was 53.0 MB. Max. memory is 11.5 GB. [2018-11-28 11:43:14,830 INFO L168 Benchmark]: RCFGBuilder took 6056.08 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 192.4 MB). Free memory was 1.0 GB in the beginning and 839.0 MB in the end (delta: 163.1 MB). Peak memory consumption was 442.6 MB. Max. memory is 11.5 GB. [2018-11-28 11:43:14,831 INFO L168 Benchmark]: BuchiAutomizer took 58165.74 ms. Allocated memory was 1.4 GB in the beginning and 6.1 GB in the end (delta: 4.7 GB). Free memory was 839.0 MB in the beginning and 2.2 GB in the end (delta: -1.4 GB). Peak memory consumption was 3.3 GB. Max. memory is 11.5 GB. [2018-11-28 11:43:14,831 INFO L168 Benchmark]: Witness Printer took 3.67 ms. Allocated memory is still 6.1 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-28 11:43:14,834 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 979.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 555.74 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 144.7 MB). Free memory was 950.6 MB in the beginning and 1.1 GB in the end (delta: -163.0 MB). Peak memory consumption was 49.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 218.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 58.6 MB). Peak memory consumption was 58.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 210.76 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 53.0 MB). Peak memory consumption was 53.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6056.08 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 192.4 MB). Free memory was 1.0 GB in the beginning and 839.0 MB in the end (delta: 163.1 MB). Peak memory consumption was 442.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 58165.74 ms. Allocated memory was 1.4 GB in the beginning and 6.1 GB in the end (delta: 4.7 GB). Free memory was 839.0 MB in the beginning and 2.2 GB in the end (delta: -1.4 GB). Peak memory consumption was 3.3 GB. Max. memory is 11.5 GB. * Witness Printer took 3.67 ms. Allocated memory is still 6.1 GB. Free memory is still 2.2 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 17 terminating modules (16 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 16 modules have a trivial ranking function, the largest among these consists of 7 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 58.1s and 17 iterations. TraceHistogramMax:1. Analysis of lassos took 5.4s. Construction of modules took 13.8s. Büchi inclusion checks took 11.8s. Highest rank in rank-based complementation 3. Minimization of det autom 17. Minimization of nondet autom 0. Automata minimization 15.1s AutomataMinimizationTime, 15 MinimizatonAttempts, 466381 StatesRemovedByMinimization, 15 NontrivialMinimizations. Non-live state removal took 7.7s Buchi closure took 1.0s. Biggest automaton had 205837 states and ocurred in iteration 15. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 284554 SDtfs, 620337 SDslu, 468071 SDs, 0 SdLazy, 33596 SolverSat, 3705 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 13.8s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI15 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital185 mio100 ax100 hnf101 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq221 hnf87 smp100 dnf187 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 6ms VariablesStem: 0 VariablesLoop: 0 DisjunctsStem: 1 DisjunctsLoop: 1 SupportingInvariants: 0 MotzkinApplications: 2 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 9 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.9s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...